# Some fields missing
**URL:** https://discuss.elastic.co/t/some-fields-missing/31828
**Category:** Logstash
**Created:** [October 8, 2015, 9:03am UTC](https://discuss.elastic.co/t/some-fields-missing/31828 "2015-10-08T09:03:23Z")
**Posts on this page:** 7
**Page:** 1
### Author:  [@Anmol\_Gupta](https://discuss.elastic.co/u/Anmol_Gupta)
#### Post date: [October 8, 2015, 9:03am UTC](https://discuss.elastic.co/t/some-fields-missing/31828/1 "2015-10-08T09:03:23Z")
when i am indexing my log file from logstash some fields are missing . \_grokparsefailure is coming . I am indexing a log file it has log levels so my error and trace are getting indexed but warn , debug are missing and when i am checking in elasticsearch then few fields is having tag \_grokparsefailure and other is not having it. what should i do?
---
### Author:  [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [October 8, 2015, 9:54am UTC](https://discuss.elastic.co/t/some-fields-missing/31828/2 "2015-10-08T09:54:58Z")
Please move this topic to the Logstash group and include your Logstash configuration, an example input message, the resulting output, and what you expected should've happened.
---
### Author:  [@Anmol\_Gupta](https://discuss.elastic.co/u/Anmol_Gupta)
#### Post date: [October 8, 2015, 9:57am UTC](https://discuss.elastic.co/t/some-fields-missing/31828/3 "2015-10-08T09:57:05Z")
input {
file {
```
path => "C:\Users\egupanm\csv\log1.log"
start_position => "beginning"
type => "logexample"
```
}
}
filter {
grok {
type =\> "logexample"
match =\> ["message", "%{TIMESTAMP\_ISO8601:timestamp} %{LOGLEVEL:log\_level} %{JAVACLASS:class} %{NUMBER:line} %{GREEDYDATA:Message}"]
}
}
output
{
elasticsearch
{
cluster =\>"elastic"
```
action => "index"
host => "localhost"
index => "new1"
}
stdout { }
```
}
cofig file
---
### Author:  [@Anmol\_Gupta](https://discuss.elastic.co/u/Anmol_Gupta)
#### Post date: [October 8, 2015, 9:59am UTC](https://discuss.elastic.co/t/some-fields-missing/31828/4 "2015-10-08T09:59:38Z")
2015-10-08 15:29:05 TRACE Example 15 Trace Message!
2015-10-08 15:29:05 INFO Example 16 Info Message!
2015-10-08 15:29:05 WARN Example 17 Warn Message!
2015-10-08 15:29:05 ERROR Example 18 Error Message!
2015-10-08 15:29:05 TRACE Example 15 Trace Message!
2015-10-08 15:29:05 INFO Example 16 Info Message!
2015-10-08 15:29:05 WARN Example 17 Warn Message!
2015-10-08 15:29:05 ERROR Example 18 Error Message!
2015-10-08 15:29:05 TRACE Example 15 Trace Message!
2015-10-08 15:29:05 INFO Example 16 Info Message!
2015-10-08 15:29:05 WARN Example 17 Warn Message!
LOG file
---
### Author:  [@Anmol\_Gupta](https://discuss.elastic.co/u/Anmol_Gupta)
#### Post date: [October 8, 2015, 10:02am UTC](https://discuss.elastic.co/t/some-fields-missing/31828/5 "2015-10-08T10:02:24Z")
I have attached log file and config file and now kibana show only few fields like error and trace are being shown but warn and info are missing . tag says \_grokparsefailure.
---
### Author:  [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [October 8, 2015, 11:36am UTC](https://discuss.elastic.co/t/some-fields-missing/31828/6 "2015-10-08T11:36:01Z")
JAVACLASS requires at least one period, i.e. Example.Example matches but Example doesn't. Use NOTSPACE instead.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 6, 2017, 5:27am UTC](https://discuss.elastic.co/t/some-fields-missing/31828/7 "2017-07-06T05:27:09Z")