# \[Solved\]Logstash 1.5.0 could not get host field

**URL:** <https://discuss.elastic.co/t/solved-logstash-1-5-0-could-not-get-host-field/2410>\
**Category:** Logstash\
**Created:** [June 11, 2015, 6:33am UTC](https://discuss.elastic.co/t/solved-logstash-1-5-0-could-not-get-host-field/2410 "2015-06-11T06:33:08Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![abcfy2](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/abcfy2/32/453_2.png) [@abcfy2](https://discuss.elastic.co/u/abcfy2)\
**Post date:** [June 11, 2015, 6:33am UTC](https://discuss.elastic.co/t/solved-logstash-1-5-0-could-not-get-host-field/2410/1 "2015-06-11T06:33:08Z")

</div>

Here is rubydebug on logstash 1.5.0:

```auto
{
     "@timestamp" => "2015-06-11T06:29:51.220Z",
        "message" => "2015-06-11 14:29:50,565 [vert.x-eventloop-thread-1] DEBUG hawkeyes.rtds.store.domain.Equipment - Packages arrived: 334",
       "@version" => "1",
           "type" => "rtds",
           "tags" => [
        [0] "rtds_log",
        [1] "vertx"
    ],
           "host" => "localhost.localdomain",
           "path" => "/var/log/rtds/rtds.log",
           "date" => "2015-06-11T06:29:50.565Z",
    "thread_name" => "vert.x-eventloop-thread-1",
      "log_level" => "DEBUG",
       "verticle" => "hawkeyes.rtds.store.domain.Equipment",
        "content" => "Packages arrived: 334"
}

```

`host` field is `localhost.localdomain`. This is not correct. Logstash 1.4.2 works very well, it can get the right `hostname`.

```bash
# hostname
edmac

# cat /etc/hostname
edmac

```

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [June 11, 2015, 6:53am UTC](https://discuss.elastic.co/t/solved-logstash-1-5-0-could-not-get-host-field/2410/2 "2015-06-11T06:53:46Z")

</div>

What does `hostname -f` on the CLI return.

---

<div class="post-metadata">

**Author:** ![abcfy2](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/abcfy2/32/453_2.png) [@abcfy2](https://discuss.elastic.co/u/abcfy2)\
**Post date:** [June 11, 2015, 7:06am UTC](https://discuss.elastic.co/t/solved-logstash-1-5-0-could-not-get-host-field/2410/3 "2015-06-11T07:06:43Z")

</div>

It returns `localhost.localdomain`. How to return `hostname` string?

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [June 11, 2015, 7:13am UTC](https://discuss.elastic.co/t/solved-logstash-1-5-0-could-not-get-host-field/2410/4 "2015-06-11T07:13:03Z")

</div>

The `hostname` command can be used to set the machine's hostname, but I think your problem is that your /etc/hosts file maps your IP address to localhost.localdomain.

---

<div class="post-metadata">

**Author:** ![abcfy2](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/abcfy2/32/453_2.png) [@abcfy2](https://discuss.elastic.co/u/abcfy2)\
**Post date:** [June 11, 2015, 7:36am UTC](https://discuss.elastic.co/t/solved-logstash-1-5-0-could-not-get-host-field/2410/5 "2015-06-11T07:36:46Z")

</div>

Yes, you're right.

/etc/hosts before:

```auto
127.0.0.1 localhost
127.0.1.1	localhost.localdomain	localhost shyq edmac

# The following lines are desirable for IPv6 capable hosts
::1 ip6-localhost ip6-loopback shyq
fe00::0 ip6-localnet
ff00::0 ip6-mcastprefix
ff02::1 ip6-allnodes
ff02::2 ip6-allrouters
10.162.96.170 AY140703160223302b59Z

```

after:

```auto
127.0.0.1 edmac
127.0.0.1 localhost
127.0.1.1	localhost.localdomain	localhost shyq

# The following lines are desirable for IPv6 capable hosts
::1 ip6-localhost ip6-loopback shyq
fe00::0 ip6-localnet
ff00::0 ip6-mcastprefix
ff02::1 ip6-allnodes
ff02::2 ip6-allrouters
10.162.96.170 AY140703160223302b59Z

```

Move `edmac` to the first line, and `hostname -f` returns `edmac`. Solved this problem.  
Thanks.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 5:37am UTC](https://discuss.elastic.co/t/solved-logstash-1-5-0-could-not-get-host-field/2410/6 "2017-07-06T05:37:47Z")

</div>