# File output plugin permission denied

**URL:** <https://discuss.elastic.co/t/file-output-plugin-permission-denied/55211>\
**Category:** Logstash\
**Created:** [July 11, 2016, 3:46pm UTC](https://discuss.elastic.co/t/file-output-plugin-permission-denied/55211 "2016-07-11T15:46:48Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![asoong-94](https://avatars.discourse-cdn.com/v4/letter/a/ecd19e/32.png) [@asoong-94](https://discuss.elastic.co/u/asoong-94)\
**Post date:** [July 11, 2016, 3:46pm UTC](https://discuss.elastic.co/t/file-output-plugin-permission-denied/55211/1 "2016-07-11T15:46:48Z")

</div>

This is my output configuration, right now i am just using grok to parse out IP and a WORD

input {stdin {} }

filter {  
grok {  
match =\> {"message" =\> "%{IP:user\_ip} %{WORD:computer\_name}"}  
}  
}

output {  
file {  
codec =\> json  
path =\> "H:\logstash\logstash\_outputfiles"  
}  
}

EACCES: Permission denied -H: logstash/logstash\_outputfiles initialize at org/jruby/RubyFile.java:370

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [July 11, 2016, 8:15pm UTC](https://discuss.elastic.co/t/file-output-plugin-permission-denied/55211/2 "2016-07-11T20:15:18Z")

</div>

Is H:\logstash\logstash\_outputfiles a file or a directory? Judging by its name it sounds like it would be a directory, but the `path` needs to be a file. I'd also try using forward slashes instead of backslashes. And, obviously, make sure the user that Logstash runs as has write access to the file in question.

---

<div class="post-metadata">

**Author:** ![asoong-94](https://avatars.discourse-cdn.com/v4/letter/a/ecd19e/32.png) [@asoong-94](https://discuss.elastic.co/u/asoong-94)\
**Post date:** [July 11, 2016, 11:27pm UTC](https://discuss.elastic.co/t/file-output-plugin-permission-denied/55211/3 "2016-07-11T23:27:25Z")

</div>

thank you, you were right, i specified a directory instead of a file

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 4:48am UTC](https://discuss.elastic.co/t/file-output-plugin-permission-denied/55211/4 "2017-07-06T04:48:34Z")

</div>