# Harvet : (offset snapshot:0) error in logstash-forwarder **URL:** \ **Category:** Logstash\ **Created:** [May 22, 2015, 12:01pm UTC](https://discuss.elastic.co/t/harvet-offset-snapshot-0-error-in-logstash-forwarder/1166 "2015-05-22T12:01:37Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![sunilmchaudhari](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sunilmchaudhari/32/9475_2.png) [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\ **Post date:** [May 22, 2015, 12:01pm UTC](https://discuss.elastic.co/t/harvet-offset-snapshot-0-error-in-logstash-forwarder/1166/1 "2015-05-22T12:01:38Z")
Hello friends, I have just configured LSF to read some crm and sales logs under /var/log. For some old files it says Skipping file (older than dead time of 24h0m0s): which is fine. However for remaining files it says harvest: "/var/log/crm/crmERROR.log" (offset snapshot:0) I cant figure out what is the issue? files are not old, those are being updated today also. Please help me on this. Note: Same set up of logstash-forwarder (64 bit RPM) is running on other machines well. please help on this. br, Sunil ---
**Author:** ![jordansissel](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jordansissel/32/44957_2.png) [@jordansissel](https://discuss.elastic.co/u/jordansissel)\ **Post date:** [May 24, 2015, 2:56am UTC](https://discuss.elastic.co/t/harvet-offset-snapshot-0-error-in-logstash-forwarder/1166/2 "2015-05-24T02:56:39Z")
It's difficult to read the lsf log messages you are talking about in your post. Can you paste them on separate lines in your post? ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 6, 2017, 5:39am UTC](https://discuss.elastic.co/t/harvet-offset-snapshot-0-error-in-logstash-forwarder/1166/3 "2017-07-06T05:39:26Z")