Could logstash log a warning when the file input plugin has 0 readable files?


I am new to the Elastic Stack, so far it has been super-fun to learn. Thanks for making this great toolkit available!

When getting started, I struggled with a number of newbie mistakes. There are quite a few things which need to line up in order to get your first bit of data to appear in Kibana.

Of the mistakes I made, one seems easily fixed. I was pointing to files which the logstash user didn't have permission to read, for example /var/syslog and /var/log/apache.

This is logged with something like:
[2016-12-12T20:59:26,648][DEBUG][logstash.inputs.file ] _globbed_files: /var/log/apache2/access*: glob is: []

I would suggest logging a warning, when the glob array is empty. I can't see to many cases where "glob is: []" is anything but bad! It could say something like "Perhaps you mistyped the file path, or you lack permissions to read that file." It seems like it would be an easy addition to logstash. It would definitely have improved my initial experience.

(Mark Walkom) #2

Thanks for raising this idea!

We do ask that these sorts of things be added as an issue to the appropriate GH repo, in this case that would be :slight_smile:


Okay thanks for letting know. I wasn't sure the protocol for this group. I've added it to the tracker in Git, see

(system) #4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.