# Having trouble with basic guide, doesn't appear to read any logs

**URL:** <https://discuss.elastic.co/t/having-trouble-with-basic-guide-doesnt-appear-to-read-any-logs/62646>\
**Category:** Logstash\
**Created:** [October 10, 2016, 3:39pm UTC](https://discuss.elastic.co/t/having-trouble-with-basic-guide-doesnt-appear-to-read-any-logs/62646 "2016-10-10T15:39:50Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![chrisan](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/chrisan/32/12335_2.png) [@chrisan](https://discuss.elastic.co/u/chrisan)\
**Post date:** [October 10, 2016, 3:39pm UTC](https://discuss.elastic.co/t/having-trouble-with-basic-guide-doesnt-appear-to-read-any-logs/62646/1 "2016-10-10T15:39:50Z")

</div>

hi everyone, I'm trying to setup logstash and am following this guide [https://www.elastic.co/guide/en/logstash/current/advanced-pipeline.html](https://www.elastic.co/guide/en/logstash/current/advanced-pipeline.html)

However, I am not seeing any output from logstash (should I?) when I run the command.

There doesn't appear to be anything in elasticsearch either.

What could I be doing wrong? here is my output: [https://gist.github.com/chrisan/f2a02f2f1d33947ae1b13f26cdbd4005](https://gist.github.com/chrisan/f2a02f2f1d33947ae1b13f26cdbd4005)

It is just sitting on "Pipeline main started"

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [October 10, 2016, 8:09pm UTC](https://discuss.elastic.co/t/having-trouble-with-basic-guide-doesnt-appear-to-read-any-logs/62646/2 "2016-10-10T20:09:50Z")

</div>

See my response here: [Logstash not indexing the input data to elastic search](https://discuss.elastic.co/t/logstash-not-indexing-the-input-data-to-elastic-search/62659)

---

<div class="post-metadata">

**Author:** ![chrisan](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/chrisan/32/12335_2.png) [@chrisan](https://discuss.elastic.co/u/chrisan)\
**Post date:** [October 11, 2016, 11:53am UTC](https://discuss.elastic.co/t/having-trouble-with-basic-guide-doesnt-appear-to-read-any-logs/62646/3 "2016-10-11T11:53:39Z")

</div>

Thank you for the reply @magnusbaeck !

I do get the correct output with rubydebug

[https://gist.github.com/chrisan/7642d3c6a7c5c1b853495fccaef027c0](https://gist.github.com/chrisan/7642d3c6a7c5c1b853495fccaef027c0) (I trimmed logstash-tutorial.log down to 10 rows)

Next I added back the elasticsearch output and ran the command with --debug [https://gist.github.com/chrisan/6b1ad44ff4f1825582679b85f33755bd](https://gist.github.com/chrisan/6b1ad44ff4f1825582679b85f33755bd)

It just keeps outputting the last few lines over and over.

I killed it after about 10 minutes and checked ES again. Still no indicies were created or searches worked. Out of curiosity I added a new line to logstash-tutorial.log and gave it today's date

`83.149.9.216 - - [10/Oct/2016:05:13:43 +0000] "GET /presentations/logstash-monitorama-2013/images/kibana-dashboard.jpg HTTP/1.1" 200 321631 "http://semicomplete.com/presentations/logstash-monitorama-2013/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/32.0.1700.77 Safari/537.36"`

I briefly saw something different in the logstash debug output and now I have a new index for today as well as 1 record

`$ curl 'localhost:9200/_cat/indices?v'health status index pri rep docs.count docs.deleted store.size pri.store.size yellow open logstash-2016.10.11 5 1 1 0 19kb 19kb`

From my original gist I have `ignore_older => 0` and `start_position => beginning` per the [elastic.co](http://elastic.co) guide

Any ideas from here?

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [October 11, 2016, 12:07pm UTC](https://discuss.elastic.co/t/having-trouble-with-basic-guide-doesnt-appear-to-read-any-logs/62646/4 "2016-10-11T12:07:33Z")

</div>

Are you deleting the sincedb file in between the runs?

---

<div class="post-metadata">

**Author:** ![chrisan](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/chrisan/32/12335_2.png) [@chrisan](https://discuss.elastic.co/u/chrisan)\
**Post date:** [October 11, 2016, 12:15pm UTC](https://discuss.elastic.co/t/having-trouble-with-basic-guide-doesnt-appear-to-read-any-logs/62646/5 "2016-10-11T12:15:58Z")

</div>

I was just following the guide [https://www.elastic.co/guide/en/logstash/current/advanced-pipeline.html](https://www.elastic.co/guide/en/logstash/current/advanced-pipeline.html)

I did not know about sincedb, thank you for pointing that out. I deleted that from my home directory and re-ran and now I have 12 records. Which I assume are 1 from my test of adding a new date to the log, 10 from the original trimmed tutorial file, and a repeat of that 1 I added because I deleted the sincedb

Thanks for your help! On to more advanced stuff 🙂

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 4:34am UTC](https://discuss.elastic.co/t/having-trouble-with-basic-guide-doesnt-appear-to-read-any-logs/62646/6 "2017-07-06T04:34:45Z")

</div>


