# When i use logstash-gelf to provide log messages, i find some messages lost

**URL:** <https://discuss.elastic.co/t/when-i-use-logstash-gelf-to-provide-log-messages-i-find-some-messages-lost/37211>\
**Category:** Logstash\
**Created:** [December 15, 2015, 8:54am UTC](https://discuss.elastic.co/t/when-i-use-logstash-gelf-to-provide-log-messages-i-find-some-messages-lost/37211 "2015-12-15T08:54:08Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![swelltt0576](https://avatars.discourse-cdn.com/v4/letter/s/a6a055/32.png) [@swelltt0576](https://discuss.elastic.co/u/swelltt0576)\
**Post date:** [December 15, 2015, 8:54am UTC](https://discuss.elastic.co/t/when-i-use-logstash-gelf-to-provide-log-messages-i-find-some-messages-lost/37211/1 "2015-12-15T08:54:08Z")

</div>

i sent 100,000 message, but there are only about 80,000 messages in the logstash.

what happend?

this is my log4j2 configuration:

```xml
    <Gelf name="gelf" host="${log4j.logstash}" port="12201" version="1.1" extractStackTrace="true"
              filterStackTrace="true" mdcProfiling="true" includeFullMdc="true" maximumMessageSize="8192"
              originHost="%host{fqdn}">
            <Field name="timestamp" pattern="%d{dd MMM yyyy HH:mm:ss,SSS}" />
            <Field name="level" pattern="%level" />
            <Field name="simpleClassName" pattern="%C{1}" />
            <Field name="className" pattern="%C" />
            <Field name="server" pattern="%host" />
<!-- <Field name="server.fqdn" pattern="%host{fqdn}" /> -->

            <!-- This is a static field -->
            <Field name="fieldName2" literal="fieldValue2" />

            <!-- This is a field using MDC -->
            <Field name="mdcField2" mdc="mdcField2" /> 
            <DynamicMdcFields regex="mdc.*" />
            <DynamicMdcFields regex="(mdc|MDC)fields" />
        </Gelf>

```

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [December 17, 2015, 12:38am UTC](https://discuss.elastic.co/t/when-i-use-logstash-gelf-to-provide-log-messages-i-find-some-messages-lost/37211/2 "2015-12-17T00:38:32Z")

</div>

Providing your LS config would also help.

---

<div class="post-metadata">

**Author:** ![swelltt0576](https://avatars.discourse-cdn.com/v4/letter/s/a6a055/32.png) [@swelltt0576](https://discuss.elastic.co/u/swelltt0576)\
**Post date:** [December 17, 2015, 12:51am UTC](https://discuss.elastic.co/t/when-i-use-logstash-gelf-to-provide-log-messages-i-find-some-messages-lost/37211/3 "2015-12-17T00:51:59Z")

</div>

hi,this is my LS conifg.

```auto
input {
   gelf{
        host => "10.1.51.7"
        port => 12201
    }
}

filter {
}

output {
  elasticsearch {
    hosts => ["localhost:9200"]
  }
  #stdout { codec => rubydebug }
}

```

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 5:18am UTC](https://discuss.elastic.co/t/when-i-use-logstash-gelf-to-provide-log-messages-i-find-some-messages-lost/37211/4 "2017-07-06T05:18:07Z")

</div>