# Issues facing Telegraf 1.8

**URL:** <https://community.influxdata.com/t/issues-facing-telegraf-1-8/6132>\
**Category:** Telegraf\
**Tags:** telegraf\
**Created:** [August 6, 2018, 9:44am UTC](https://community.influxdata.com/t/issues-facing-telegraf-1-8/6132 "2018-08-06T09:44:27Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![yj1542](https://sea1.discourse-cdn.com/flex023/user_avatar/community.influxdata.com/yj1542/32/1266_2.png) [@yj1542](https://community.influxdata.com/u/yj1542)\
**Post date:** [August 6, 2018, 9:44am UTC](https://community.influxdata.com/t/issues-facing-telegraf-1-8/6132/1 "2018-08-06T09:44:27Z")

</div>

I upgraded to 1.7 --\> 1.8 Telegraf

And here’s a quote from the window Console

```
  2018-08-06T09:37:35Z W! DEPRECATED: The logparser plugin is deprecated in 1.8. Please use the tail 
  plugin with the grok data_format as a replacement.

  2018-08-06T09:37:35Z E! Error parsing 2018/5/9.18:15:57 to time layout [2006/1/2,15:4:5]: parsing time 
  "2018/5/9.18:15:57" as "2006/1/2,15:4:5": cannot parse ".18:15:57" as ","

```

I guess I was using LogParser Grok and I think it has something to do with it.

```
  [inputs.logparser.grok]
      custom_patterns = '''
		TIMESTAMP_ALT %{YEAR}/%{MONTHNUM}/%{MONTHDAY} %{HOUR}:%{MINUTE2}:%{SECOND}(.[0-9])
		NEWTIME %{TIMESTAMP_ALT:time:ts-"2006/1/2 15:4:5"}
............................................................................................

```

Can you give me any hints regarding custom\_patterns?  
Or is there another problem?  
Thank you

---

<div class="post-metadata">

**Author:** ![noahcrowley](https://sea1.discourse-cdn.com/flex023/user_avatar/community.influxdata.com/noahcrowley/32/818_2.png) [@noahcrowley](https://community.influxdata.com/u/noahcrowley)\
**Post date:** [August 7, 2018, 12:31pm UTC](https://community.influxdata.com/t/issues-facing-telegraf-1-8/6132/2 "2018-08-07T12:31:40Z")

</div>

Just to be clear, Telegraf 1.8 has not been released yet. The [current version is 1.7.2](http://influxdata.com/downloads).

The error message says:

> [@yj1542](#):
>
> ```plaintext
> The logparser plugin is deprecated in 1.8. Please use the tail 
> plugin with the grok data_format as a replacement.
> 
> ```

This means that instead of using the [logparser plugin](https://github.com/influxdata/telegraf/tree/master/plugins/inputs/logparser) (which is configured in the `inputs.logparser.grok` section of the config that you shared), you should be using the [tail plugin](https://github.com/influxdata/telegraf/tree/master/plugins/inputs/tail), with the [Grok data format](https://github.com/influxdata/telegraf/blob/master/docs/DATA_FORMATS_INPUT.md#grok).

---

<div class="post-metadata">

**Author:** ![bolek2000](https://sea1.discourse-cdn.com/flex023/user_avatar/community.influxdata.com/bolek2000/32/2166_2.png) [@bolek2000](https://community.influxdata.com/u/bolek2000)\
**Post date:** [October 1, 2018, 12:40pm UTC](https://community.influxdata.com/t/issues-facing-telegraf-1-8/6132/3 "2018-10-01T12:40:03Z")

</div>

Hi, I tested that and it works for me, but I have a problem with the changing measurement names. In Logparser Plugin I could define the `measurement =` Now all metrics go into the tail measurement.  
With the processor.rename I can successfully rename the measurement, but what if I have different logfiles on a host and I want to rename the measurements for multiple logfiles ? Is that possible with 1.8 ?

logfileA -\> measurementA  
logfileB -\> measurementB

---

<div class="post-metadata">

**Author:** ![glinton](https://avatars.discourse-cdn.com/v4/letter/g/b487fb/32.png) [@glinton](https://community.influxdata.com/u/glinton)\
**Post date:** [October 1, 2018, 4:42pm UTC](https://community.influxdata.com/t/issues-facing-telegraf-1-8/6132/4 "2018-10-01T16:42:36Z")

</div>

> what if I have different logfiles on a host and I want to rename the measurements for multiple logfiles

Regarding your use case, there is a `path` tag that gets added with the filename being watched as the value.

---

<div class="post-metadata">

**Author:** ![bolek2000](https://sea1.discourse-cdn.com/flex023/user_avatar/community.influxdata.com/bolek2000/32/2166_2.png) [@bolek2000](https://community.influxdata.com/u/bolek2000)\
**Post date:** [October 1, 2018, 5:26pm UTC](https://community.influxdata.com/t/issues-facing-telegraf-1-8/6132/5 "2018-10-01T17:26:54Z")

</div>

I already have measurements and dashboards with a lot of data in it, so I would prefer to keep the old measurement names. I found

> <https://github.com/influxdata/telegraf/blob/master/docs/CONFIGURATION.md#multiple-inputs-of-the-same-type>

and the `name_override` seems to be what I am looking for. I will test that.
