# Deleted logstash-plain.log - it's not coming back! **URL:** \ **Category:** Logstash\ **Created:** [January 19, 2022, 1:45pm UTC](https://discuss.elastic.co/t/deleted-logstash-plain-log-its-not-coming-back/294821 "2022-01-19T13:45:16Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![PSFletchTheTek](https://avatars.discourse-cdn.com/v4/letter/p/53a042/32.png) [@PSFletchTheTek](https://discuss.elastic.co/u/PSFletchTheTek)\ **Post date:** [January 19, 2022, 1:45pm UTC](https://discuss.elastic.co/t/deleted-logstash-plain-log-its-not-coming-back/294821/1 "2022-01-19T13:45:16Z")
Hi All, Help, in a process of trying to debug i deleted logstash-plain.log from /var/log/logstash. but its not come back! Any ideas how i get it back please? ---
**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\ **Post date:** [January 19, 2022, 1:59pm UTC](https://discuss.elastic.co/t/deleted-logstash-plain-log-its-not-coming-back/294821/2 "2022-01-19T13:59:10Z")
You will need to stop and start logstash again so it can recreate the file. ---
**Author:** ![PSFletchTheTek](https://avatars.discourse-cdn.com/v4/letter/p/53a042/32.png) [@PSFletchTheTek](https://discuss.elastic.co/u/PSFletchTheTek)\ **Post date:** [January 19, 2022, 2:00pm UTC](https://discuss.elastic.co/t/deleted-logstash-plain-log-its-not-coming-back/294821/3 "2022-01-19T14:00:30Z")
tried that...... I'll try a reboot. Thanks! ---
**Author:** ![PSFletchTheTek](https://avatars.discourse-cdn.com/v4/letter/p/53a042/32.png) [@PSFletchTheTek](https://discuss.elastic.co/u/PSFletchTheTek)\ **Post date:** [January 19, 2022, 2:05pm UTC](https://discuss.elastic.co/t/deleted-logstash-plain-log-its-not-coming-back/294821/4 "2022-01-19T14:05:47Z")
O man! Ok a systemctl restart logstash.service didn't work! but a full reboot did! - back to debugging again! Thanks! ---
**Author:** ![aaron-nimocks](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/aaron-nimocks/32/73965_2.png) [@aaron-nimocks](https://discuss.elastic.co/u/aaron-nimocks)\ **Post date:** [January 19, 2022, 2:09pm UTC](https://discuss.elastic.co/t/deleted-logstash-plain-log-its-not-coming-back/294821/5 "2022-01-19T14:09:50Z")
Does it give any clue if you do `systemctl status logstash.service`? Try to manually create the file and set the correct chown and chmod? You shouldn't have to do this but might help get things going. `touch /var/log/logstash/logstash-plain.log` `chown logstash:logstash /var/log/logstash/logstash-plain.log` `chmod 755 /var/log/logstash/logstash-plain.log` (I think it's 755) `systemctl restart logstash.service` ---
**Author:** ![PSFletchTheTek](https://avatars.discourse-cdn.com/v4/letter/p/53a042/32.png) [@PSFletchTheTek](https://discuss.elastic.co/u/PSFletchTheTek)\ **Post date:** [January 19, 2022, 2:11pm UTC](https://discuss.elastic.co/t/deleted-logstash-plain-log-its-not-coming-back/294821/6 "2022-01-19T14:11:17Z")
The status just said it was running. I did everything other than the chmod command. And it didn't work. But a full reboot burst it back info life! ---
**Author:** ![aaron-nimocks](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/aaron-nimocks/32/73965_2.png) [@aaron-nimocks](https://discuss.elastic.co/u/aaron-nimocks)\ **Post date:** [January 19, 2022, 2:12pm UTC](https://discuss.elastic.co/t/deleted-logstash-plain-log-its-not-coming-back/294821/7 "2022-01-19T14:12:31Z")
Ahh ok. I misread your last post as the reboot didn't work. I see it now. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [February 16, 2022, 2:13pm UTC](https://discuss.elastic.co/t/deleted-logstash-plain-log-its-not-coming-back/294821/8 "2022-02-16T14:13:00Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.