# Is logstash running, not getting messages after default pipeline workers **URL:** \ **Category:** Logstash\ **Created:** [September 1, 2016, 6:14am UTC](https://discuss.elastic.co/t/is-logstash-running-not-getting-messages-after-default-pipeline-workers/59496 "2016-09-01T06:14:56Z")\ **Posts on this page:** 10\ **Page:** 1
**Author:** ![Siva\_Dorai](https://avatars.discourse-cdn.com/v4/letter/s/57b2e6/32.png) [@Siva\_Dorai](https://discuss.elastic.co/u/Siva_Dorai)\ **Post date:** [September 1, 2016, 6:14am UTC](https://discuss.elastic.co/t/is-logstash-running-not-getting-messages-after-default-pipeline-workers/59496/1 "2016-09-01T06:14:56Z")
When i try to run my conf file, dont get any action after the settings line. E:\ArchWorld\logstash-2.3.4\bin\>logstash -f ../first.conf io/console not supported; tty will not be manipulated Settings: Default pipeline workers: 4 My conf file looks like this input { file { path =\> "E:\ArchWorld\temp\txn.log" start\_position =\> "beginning" ignore\_older =\> 0 } } # The filter part of this file is commented out to indicate that it is # optional. filter { grok { match =\> { "message" =\> "%{COMBINEDAPACHELOG}"} } } output { elasticsearch { } stdout {} } With -v option this is what i get E:\ArchWorld\logstash-2.3.4\bin\>logstash agent -f E:\ArchWorld\logstash-2.3.4\first.conf -v io/console not supported; tty will not be manipulated e[32mstarting agent {:level=\>:info}e[0m e[32mstarting pipeline {:id=\>"main", :level=\>:info}e[0m Settings: Default pipeline workers: 4 e[32mRegistering file input {:path=\>["E:\ArchWorld\temp\txn.log"], :level=\>:info}e[0m e[32mNo sincedb\_path set, generating one based on the file path {:sincedb\_path=\>"C:\Users\SD00472887/.sincedb\_b98e98cc115a6c233f1dc3807d0339bd", :path=\>["E:\ArchWorld\temp\txn.log"], :level=\>:info}e[0m e[32mUsing mapping template from {:path=\>nil, :level=\>:info}e[0m e[32mAttempting to install template {:manage\_template=\>{"template"=\>"logstash-_", "settings"=\>{"index.refresh\_interval"=\>"5s"}, "mappings"=\>{"default"=\>{"\_all"=\>{"enabled"=\>true, "omit\_norms"=\>true}, "dynamic\_templates"=\>[{"message\_field"=\>{"match"=\>"message", "match\_mapping\_type"=\>"string", "mapping"=\>{"type"=\>"string", "index"=\>"analyzed", "omit\_norms"=\>true, "fielddata"=\>{"format"=\>"disabled"}}}}, {"string\_fields"=\>{"match"=\>"_", "match\_mapping\_type"=\>"string", "mapping"=\>{"type"=\>"string", "index"=\>"analyzed", "omit\_norms"=\>true, "fielddata"=\>{"format"=\>"disabled"}, "fields"=\>{"raw"=\>{"type"=\>"string", "index"=\>"not\_analyzed", "ignore\_above"=\>256}}}}}], "properties"=\>{"@timestamp"=\>{"type"=\>"date"}, "@version"=\>{"type"=\>"string", "index"=\>"not\_analyzed"}, "geoip"=\>{"dynamic"=\>true, "properties"=\>{"ip"=\>{"type"=\>"ip"}, "location"=\>{"type"=\>"geo\_point"}, "latitude"=\>{"type"=\>"float"}, "longitude"=\>{"type"=\>"float"}}}}}}}, :level=\>:info} Referred few other similar posts, but not sure of way ahead. Appreciate any help in this regard. Thanks. ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [September 1, 2016, 6:15am UTC](https://discuss.elastic.co/t/is-logstash-running-not-getting-messages-after-default-pipeline-workers/59496/2 "2016-09-01T06:15:21Z")
Is new data going into the file? ---
**Author:** ![Siva\_Dorai](https://avatars.discourse-cdn.com/v4/letter/s/57b2e6/32.png) [@Siva\_Dorai](https://discuss.elastic.co/u/Siva_Dorai)\ **Post date:** [September 1, 2016, 6:19am UTC](https://discuss.elastic.co/t/is-logstash-running-not-getting-messages-after-default-pipeline-workers/59496/3 "2016-09-01T06:19:53Z")
I have the data from a dummy log file, like below * * * 9962222248|FT|2016-08-01T11:01:01|TRN0000001 9962222247|FT|2016-08-01T11:01:11|TRN0000002 9962222246|FT|2016-08-01T11:01:21|TRN0000003 9962222245|FT|2016-08-01T11:01:31|TRN0000004 9962222244|FT|2016-08-01T11:01:41|TRN0000005 9962222243|FT|2016-08-01T11:01:01|TRN0000006 9962222242|FT|2016-08-01T11:01:51|TRN0000007 9962222241|FT|2016-08-01T11:01:60|TRN0000008 9962222248|FT|2016-08-01T11:02:01|TRN0000009 ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [September 1, 2016, 6:34am UTC](https://discuss.elastic.co/t/is-logstash-running-not-getting-messages-after-default-pipeline-workers/59496/4 "2016-09-01T06:34:37Z")
Yes but is there new data going into the file, or is the file static? ---
**Author:** ![Siva\_Dorai](https://avatars.discourse-cdn.com/v4/letter/s/57b2e6/32.png) [@Siva\_Dorai](https://discuss.elastic.co/u/Siva_Dorai)\ **Post date:** [September 1, 2016, 6:37am UTC](https://discuss.elastic.co/t/is-logstash-running-not-getting-messages-after-default-pipeline-workers/59496/5 "2016-09-01T06:37:02Z")
This is a static file ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [September 1, 2016, 6:44am UTC](https://discuss.elastic.co/t/is-logstash-running-not-getting-messages-after-default-pipeline-workers/59496/6 "2016-09-01T06:44:10Z")
You will need to alter your `ignore_older` value then - [https://www.elastic.co/guide/en/logstash/current/plugins-inputs-file.html#plugins-inputs-file-ignore\_older](https://www.elastic.co/guide/en/logstash/current/plugins-inputs-file.html#plugins-inputs-file-ignore_older) ---
**Author:** ![Siva\_Dorai](https://avatars.discourse-cdn.com/v4/letter/s/57b2e6/32.png) [@Siva\_Dorai](https://discuss.elastic.co/u/Siva_Dorai)\ **Post date:** [September 1, 2016, 6:48am UTC](https://discuss.elastic.co/t/is-logstash-running-not-getting-messages-after-default-pipeline-workers/59496/7 "2016-09-01T06:48:03Z")
Currently I have specified it to 0, what should that be changed to ? ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [September 1, 2016, 7:10am UTC](https://discuss.elastic.co/t/is-logstash-running-not-getting-messages-after-default-pipeline-workers/59496/8 "2016-09-01T07:10:25Z")
I'd leave it at the default myself. ---
**Author:** ![Siva\_Dorai](https://avatars.discourse-cdn.com/v4/letter/s/57b2e6/32.png) [@Siva\_Dorai](https://discuss.elastic.co/u/Siva_Dorai)\ **Post date:** [September 1, 2016, 8:34am UTC](https://discuss.elastic.co/t/is-logstash-running-not-getting-messages-after-default-pipeline-workers/59496/9 "2016-09-01T08:34:26Z")
Even did that earlier it doesnt work. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 6, 2017, 4:40am UTC](https://discuss.elastic.co/t/is-logstash-running-not-getting-messages-after-default-pipeline-workers/59496/10 "2017-07-06T04:40:30Z")