# Value found in extractor not exist in full message

**URL:** <https://community.graylog.org/t/value-found-in-extractor-not-exist-in-full-message/12603>\
**Category:** Graylog Central (peer support)\
**Created:** [November 3, 2019, 10:17am UTC](https://community.graylog.org/t/value-found-in-extractor-not-exist-in-full-message/12603 "2019-11-03T10:17:02Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![vpolizki](https://avatars.discourse-cdn.com/v4/letter/v/b9bd4f/32.png) [@vpolizki](https://community.graylog.org/u/vpolizki)\
**Post date:** [November 3, 2019, 10:17am UTC](https://community.graylog.org/t/value-found-in-extractor-not-exist-in-full-message/12603/1 "2019-11-03T10:17:02Z")

</div>

in specific stream -\> Value found in extractor not exist in full message .

Hi, you right , my mistake .I add all info , :  
I have server with nxlog that monitor text files and transfer to graylog on the same server.  
variables in file separate by semicolon (;), so i used “split and index” to create extractors - very simple .  
Now i see that extractors include value that not inside of full message, they cuts from other row in stream ?  
My GRAYLOG IS 2.4 version, I use same way to split for many inputs and only one with this problem.  
I create new extractor in the same way and it is work OK. something go wrong with old extractors.

---

<div class="post-metadata">

**Author:** ![jan](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jan/32/11_2.png) [@jan](https://community.graylog.org/u/jan)\
**Post date:** [November 4, 2019, 8:51am UTC](https://community.graylog.org/t/value-found-in-extractor-not-exist-in-full-message/12603/2 "2019-11-04T08:51:17Z")

</div>

I guess you might have configured something wrong …

You provide NO detail of anything - that is why you could not get any help over here.

---

<div class="post-metadata">

**Author:** ![vpolizki](https://avatars.discourse-cdn.com/v4/letter/v/b9bd4f/32.png) [@vpolizki](https://community.graylog.org/u/vpolizki)\
**Post date:** [November 4, 2019, 10:00am UTC](https://community.graylog.org/t/value-found-in-extractor-not-exist-in-full-message/12603/3 "2019-11-04T10:00:26Z")

</div>

> [@vpolizki](#):
>
> Hi, you right , my mistake .I add all info , :

Hi, you right , my mistake .I add all info

---

<div class="post-metadata">

**Author:** ![shoothub](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/shoothub/32/6412_2.png) [@shoothub](https://community.graylog.org/u/shoothub)\
**Post date:** [November 5, 2019, 8:20am UTC](https://community.graylog.org/t/value-found-in-extractor-not-exist-in-full-message/12603/4 "2019-11-05T08:20:12Z")

</div>

Check your extractor configuration, especially **Extraction strategy** , if it is **Copy** and not Cut.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [November 19, 2019, 8:20am UTC](https://community.graylog.org/t/value-found-in-extractor-not-exist-in-full-message/12603/5 "2019-11-19T08:20:12Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.