# Input file contains tailing buffer - cannot input **URL:** \ **Category:** Logstash\ **Created:** [January 18, 2016, 7:40am UTC](https://discuss.elastic.co/t/input-file-contains-tailing-buffer-cannot-input/39421 "2016-01-18T07:40:18Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![jagfarrell](https://avatars.discourse-cdn.com/v4/letter/j/50afbb/32.png) [@jagfarrell](https://discuss.elastic.co/u/jagfarrell)\ **Post date:** [January 18, 2016, 7:40am UTC](https://discuss.elastic.co/t/input-file-contains-tailing-buffer-cannot-input/39421/1 "2016-01-18T07:40:18Z")
Hi All, I've got a log file from an application which ends with a tailing buffer. When I try to input it into Logstash it doesn't read the file. At the end of each day the log file saves without the buffer and a new log is started for the new day. The flat log files from the previous days input correctly but the new file doesn't. I can't find any way to ignore the tailing buffer on the log file. Can anyone help? ---
**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\ **Post date:** [January 18, 2016, 7:49am UTC](https://discuss.elastic.co/t/input-file-contains-tailing-buffer-cannot-input/39421/2 "2016-01-18T07:49:59Z")
What do mean by "tailing buffer"? ---
**Author:** ![jagfarrell](https://avatars.discourse-cdn.com/v4/letter/j/50afbb/32.png) [@jagfarrell](https://discuss.elastic.co/u/jagfarrell)\ **Post date:** [January 18, 2016, 8:33am UTC](https://discuss.elastic.co/t/input-file-contains-tailing-buffer-cannot-input/39421/3 "2016-01-18T08:33:43Z")
There is a 4 mb memory block which is maintained at the end of the current days log file. Its full of NULLNULLNULL values. When logstash reaches this log line it stops working. When the file is next updated, logstash doesn't detect the update to the file and nothing is input into Logstash. ---
**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\ **Post date:** [January 18, 2016, 9:49am UTC](https://discuss.elastic.co/t/input-file-contains-tailing-buffer-cannot-input/39421/4 "2016-01-18T09:49:40Z")
Oh. How creative with 4 MB of nulls. Yes, I'd expect Logstash to not like that at all. I'm afraid I don't have any good suggestions. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 6, 2017, 5:15am UTC](https://discuss.elastic.co/t/input-file-contains-tailing-buffer-cannot-input/39421/5 "2017-07-06T05:15:22Z")