# File Discovery in Logstash
**URL:** https://discuss.elastic.co/t/file-discovery-in-logstash/85747
**Category:** Logstash
**Created:** [May 15, 2017, 11:11am UTC](https://discuss.elastic.co/t/file-discovery-in-logstash/85747 "2017-05-15T11:11:41Z")
**Posts on this page:** 5
**Page:** 1
### Author:  [@thorsten1](https://discuss.elastic.co/u/thorsten1)
#### Post date: [May 15, 2017, 11:11am UTC](https://discuss.elastic.co/t/file-discovery-in-logstash/85747/1 "2017-05-15T11:11:41Z")
Hello,
my Logstash Server has an Upload-Directory where other Users can upload their Log-Files.
Logstash is configured to listen to all files in this directory.
```
input {
file {
path => "/opt/logupload/*.log"
start_position => "beginning"
stat_interval => 5
codec => ...
}
}
```
When I have uploaded a new file, nothing happen's in Logstash. But when I stop my Logstash-Service it begin to parse the file.
Do you have an idea, why the parsing only starts when the service will be stopped?
---
### Author:  [@thorsten1](https://discuss.elastic.co/u/thorsten1)
#### Post date: [May 19, 2017, 8:37am UTC](https://discuss.elastic.co/t/file-discovery-in-logstash/85747/2 "2017-05-19T08:37:03Z")
Did I use the wrong Plugin?
---
### Author:  [@Nico-DF](https://discuss.elastic.co/u/Nico-DF)
#### Post date: [May 19, 2017, 8:52am UTC](https://discuss.elastic.co/t/file-discovery-in-logstash/85747/3 "2017-05-19T08:52:42Z")
It used to happend to me when I used multiline plugin. It waits until the end match, but when you stop it, it will push the event regardless of the end matched or not.
Do you have any aggregation or multiline that might cause this?
---
### Author:  [@thorsten1](https://discuss.elastic.co/u/thorsten1)
#### Post date: [May 19, 2017, 9:24am UTC](https://discuss.elastic.co/t/file-discovery-in-logstash/85747/4 "2017-05-19T09:24:02Z")
Yes I use multiline codec in this way:
```
codec => multiline {
pattern => "^%{MONTH}%{SPACE}%{MONTHDAY}|^%{HOUR}:%{MINUTE}:%{SECOND}"
negate => true
what => previous
}
...
```
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [June 16, 2017, 9:24am UTC](https://discuss.elastic.co/t/file-discovery-in-logstash/85747/5 "2017-06-16T09:24:14Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.