# Alternative to File Input

**URL:** <https://discuss.elastic.co/t/alternative-to-file-input/120329>\
**Category:** Logstash\
**Created:** [February 18, 2018, 12:34am UTC](https://discuss.elastic.co/t/alternative-to-file-input/120329 "2018-02-18T00:34:26Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![wwalker](https://avatars.discourse-cdn.com/v4/letter/w/43a26b/32.png) [@wwalker](https://discuss.elastic.co/u/wwalker)\
**Post date:** [February 18, 2018, 12:34am UTC](https://discuss.elastic.co/t/alternative-to-file-input/120329/1 "2018-02-18T00:34:26Z")

</div>

I have static XML files that Logstash ingests. My current pipeline utilizes the File Input with the Multiline codec which works but is not perfect. The File input doesn't fully meet my needs because, I assume, it leaves the file open, preventing it from sending the final closing tags for certain events. If I modify my pipeline and save it, the pipeline reloads and, again assuming, on shutdown of the pipeline, the files are closed and finish processing. Is there another method or configurable option with the File input that I can set to solve this issue?

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [February 18, 2018, 2:25pm UTC](https://discuss.elastic.co/t/alternative-to-file-input/120329/2 "2018-02-18T14:25:48Z")

</div>

> preventing it from sending the final closing tags for certain events.

Are you using the multiline codec's `auto_flush_interval` option?

Also, see [Option to just read from files (without continuously watching them) · Issue #48 · logstash-plugins/logstash-input-file · GitHub](https://github.com/logstash-plugins/logstash-input-file/issues/48).

---

<div class="post-metadata">

**Author:** ![wwalker](https://avatars.discourse-cdn.com/v4/letter/w/43a26b/32.png) [@wwalker](https://discuss.elastic.co/u/wwalker)\
**Post date:** [February 18, 2018, 10:56pm UTC](https://discuss.elastic.co/t/alternative-to-file-input/120329/3 "2018-02-18T22:56:26Z")

</div>

I was not...but I AM now...and it seems to work, thank you sir.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 18, 2018, 10:56pm UTC](https://discuss.elastic.co/t/alternative-to-file-input/120329/4 "2018-03-18T22:56:31Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
