# Force LogStash to read End of File?

**URL:** <https://discuss.elastic.co/t/force-logstash-to-read-end-of-file/56613>\
**Category:** Logstash\
**Created:** [July 28, 2016, 11:13am UTC](https://discuss.elastic.co/t/force-logstash-to-read-end-of-file/56613 "2016-07-28T11:13:12Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![londonx](https://avatars.discourse-cdn.com/v4/letter/l/da6949/32.png) [@londonx](https://discuss.elastic.co/u/londonx)\
**Post date:** [July 28, 2016, 11:13am UTC](https://discuss.elastic.co/t/force-logstash-to-read-end-of-file/56613/1 "2016-07-28T11:13:12Z")

</div>

Hi was wondering if anyone had a cunning way to force LogStash to always read the end of a file , no need for a sincedb\_path file etc whether the logs are new or not after say a Logstash restart?

The only current out-of-the-box method seems to be is set the flag start\_position =\> "end" (default value) and remember to delete that sincedb\_path file before starting up Logstash which requires manual intervention or a bespoke startup script.

Was going to put in a feature request for a 'always' or 'force' read end of file flag but wanted to ask if people had any other ideas first.

Regards

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [July 31, 2016, 8:26pm UTC](https://discuss.elastic.co/t/force-logstash-to-read-end-of-file/56613/2 "2016-07-31T20:26:48Z")

</div>

Setting `sincedb_path` to nul (Windows) or /dev/null (anything but Windows) will effectively disable sincedb.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 4:45am UTC](https://discuss.elastic.co/t/force-logstash-to-read-end-of-file/56613/3 "2017-07-06T04:45:40Z")

</div>

Closed on July 6, 2017, 4:45am UTC


