# Elasticsearch Logfiles

**URL:** <https://discuss.elastic.co/t/elasticsearch-logfiles/109318>\
**Category:** Elasticsearch\
**Created:** [November 28, 2017, 6:56am UTC](https://discuss.elastic.co/t/elasticsearch-logfiles/109318 "2017-11-28T06:56:24Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![McElroy](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mcelroy/32/24639_2.png) [@McElroy](https://discuss.elastic.co/u/McElroy)\
**Post date:** [November 28, 2017, 6:56am UTC](https://discuss.elastic.co/t/elasticsearch-logfiles/109318/1 "2017-11-28T06:56:24Z")

</div>

Hi,

I ran into troubles with my elasticsearch log files. There were 21GB of logs one of my machines.  
After trying to reconfigure the log4j2.properties, elasticsearch didn't start anymore.  
Here is the documentation I've used: [Configuring Elasticsearch](https://www.elastic.co/guide/en/elasticsearch/reference/5.5/settings.html)

And this is the config itself: [Config](https://pastebin.com/XwBidCma)

---

<div class="post-metadata">

**Author:** ![spinscale](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/spinscale/32/25011_2.png) [@spinscale](https://discuss.elastic.co/u/spinscale)\
**Post date:** [November 28, 2017, 7:50am UTC](https://discuss.elastic.co/t/elasticsearch-logfiles/109318/2 "2017-11-28T07:50:29Z")

</div>

can you share log file excerpts, please?

---

<div class="post-metadata">

**Author:** ![McElroy](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mcelroy/32/24639_2.png) [@McElroy](https://discuss.elastic.co/u/McElroy)\
**Post date:** [November 28, 2017, 7:55am UTC](https://discuss.elastic.co/t/elasticsearch-logfiles/109318/3 "2017-11-28T07:55:56Z")

</div>

Why?  
I just want to keep my logfiles for seven days. My problem was that I still had logfiles from 2015 and we have a huge amount of data in elasticsearch.

---

<div class="post-metadata">

**Author:** ![spinscale](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/spinscale/32/25011_2.png) [@spinscale](https://discuss.elastic.co/u/spinscale)\
**Post date:** [November 28, 2017, 7:57am UTC](https://discuss.elastic.co/t/elasticsearch-logfiles/109318/4 "2017-11-28T07:57:31Z")

</div>

Sorry for not being clear, I was talking about Elasticsearch logs in order to find out why Elasticsearch does not start. I really dont care about logs of 2015.

---

<div class="post-metadata">

**Author:** ![McElroy](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mcelroy/32/24639_2.png) [@McElroy](https://discuss.elastic.co/u/McElroy)\
**Post date:** [November 28, 2017, 8:06am UTC](https://discuss.elastic.co/t/elasticsearch-logfiles/109318/5 "2017-11-28T08:06:48Z")

</div>

I'll be damned... Sorry for the inconvenience... I just pasted it on one of my machines and restarted the service in order to get the logs and now it works like a charme.

But do I really have to restart the service in order to get it running with the new config?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 26, 2017, 8:07am UTC](https://discuss.elastic.co/t/elasticsearch-logfiles/109318/6 "2017-12-26T08:07:13Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.