# Change logstash logs and temp location

**URL:** <https://discuss.elastic.co/t/change-logstash-logs-and-temp-location/24494>\
**Category:** Logstash\
**Created:** [June 28, 2015, 4:58am UTC](https://discuss.elastic.co/t/change-logstash-logs-and-temp-location/24494 "2015-06-28T04:58:52Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![karasmeitar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/karasmeitar/32/35703_2.png) [@karasmeitar](https://discuss.elastic.co/u/karasmeitar)\
**Post date:** [June 28, 2015, 4:58am UTC](https://discuss.elastic.co/t/change-logstash-logs-and-temp-location/24494/1 "2015-06-28T04:58:52Z")

</div>

Hi all,  
I install logstash on ubunto as a service and i want to change the logs location and the location of the temp folder(were logsrash save the files before execute).  
How can i do it?

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [June 28, 2015, 5:37am UTC](https://discuss.elastic.co/t/change-logstash-logs-and-temp-location/24494/2 "2015-06-28T05:37:12Z")

</div>

For the first part see [https://www.elastic.co/guide/en/logstash/current/\_command\_line\_flags.html](https://www.elastic.co/guide/en/logstash/current/_command_line_flags.html)

Can you clarify what you mean by the second part?

---

<div class="post-metadata">

**Author:** ![karasmeitar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/karasmeitar/32/35703_2.png) [@karasmeitar](https://discuss.elastic.co/u/karasmeitar)\
**Post date:** [June 28, 2015, 6:50am UTC](https://discuss.elastic.co/t/change-logstash-logs-and-temp-location/24494/3 "2015-06-28T06:50:34Z")

</div>

i have config file that get files as an input from s3 and add the logs to elasticsearch.  
logstash will download the file from s3 to temp folder and then process the file and create bulk operation. after the bulk operation the file deleted from the temp directory and delete from the s3 bucket.  
i need to change the folder for the file that are download from the s3.  
about the log that you said can i changed it in the /etc/init.d/logstash file?

10x!

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [June 28, 2015, 7:04am UTC](https://discuss.elastic.co/t/change-logstash-logs-and-temp-location/24494/4 "2015-06-28T07:04:41Z")

</div>

You can set the log via run time options in `/etc/default/logstash`.

For the temp directory, the docs have what you want [https://www.elastic.co/guide/en/logstash/current/plugins-inputs-s3.html#plugins-inputs-s3-temporary\_directory](https://www.elastic.co/guide/en/logstash/current/plugins-inputs-s3.html#plugins-inputs-s3-temporary_directory)

---

<div class="post-metadata">

**Author:** ![karasmeitar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/karasmeitar/32/35703_2.png) [@karasmeitar](https://discuss.elastic.co/u/karasmeitar)\
**Post date:** [June 28, 2015, 7:06am UTC](https://discuss.elastic.co/t/change-logstash-logs-and-temp-location/24494/5 "2015-06-28T07:06:18Z")

</div>

10x!!

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [June 28, 2015, 7:09am UTC](https://discuss.elastic.co/t/change-logstash-logs-and-temp-location/24494/6 "2015-06-28T07:09:23Z")

</div>

Don't thank me, thank the docs 😛

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 5:36am UTC](https://discuss.elastic.co/t/change-logstash-logs-and-temp-location/24494/7 "2017-07-06T05:36:16Z")

</div>


