# Deleted logstash.log does not get replaced automatically

**URL:** <https://discuss.elastic.co/t/deleted-logstash-log-does-not-get-replaced-automatically/65524>\
**Category:** Logstash\
**Created:** [November 9, 2016, 4:02pm UTC](https://discuss.elastic.co/t/deleted-logstash-log-does-not-get-replaced-automatically/65524 "2016-11-09T16:02:29Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![rhubarb18x](https://avatars.discourse-cdn.com/v4/letter/r/c68b51/32.png) [@rhubarb18x](https://discuss.elastic.co/u/rhubarb18x)\
**Post date:** [November 9, 2016, 4:02pm UTC](https://discuss.elastic.co/t/deleted-logstash-log-does-not-get-replaced-automatically/65524/1 "2016-11-09T16:02:29Z")

</div>

Hi,

I wanted to clean up the log file to speed up my troubleshooting and I deleted the logstash.log file. Actually I moved it and then deleted it.

I tried many things to spark it's recreation. I created a new file and changed he ownership and permissions, but no luck.

I saw an old post about how the data in the log file is necessary for the logging, but as I've deleted the file I'm not sure how to resolve.

Any ideas?

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [November 12, 2016, 6:08pm UTC](https://discuss.elastic.co/t/deleted-logstash-log-does-not-get-replaced-automatically/65524/2 "2016-11-12T18:08:42Z")

</div>

Please edit your post and move it to the Logstash category. It has nothing to do with logstash-forwarder.

Have you restarted Logstash? I'm not sure Logstash reopens its log file except during startup.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 4:30am UTC](https://discuss.elastic.co/t/deleted-logstash-log-does-not-get-replaced-automatically/65524/3 "2017-07-06T04:30:36Z")

</div>


