# Log file doesnt read

**URL:** https://discuss.elastic.co/t/log-file-doesnt-read/273665
**Category:** Logstash
**Created:** [May 21, 2021, 12:33pm UTC](https://discuss.elastic.co/t/log-file-doesnt-read/273665 "2021-05-21T12:33:19Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![legolas\_bilbao](https://avatars.discourse-cdn.com/v4/letter/l/3da27b/32.png) [@legolas\_bilbao](https://discuss.elastic.co/u/legolas_bilbao)
#### Post date: [May 21, 2021, 12:33pm UTC](https://discuss.elastic.co/t/log-file-doesnt-read/273665/1 "2021-05-21T12:33:19Z")

</div>

HI everybody,  
I wanna read and deploy data from file logs but when i started the logstash service appears the following data

Logstash.log

> [2021-05-21T13:50:38,097][INFO][logstash.inputs.file][squid] No sincedb\_path set, generating one based on the "path" setting {:sincedb\_path=\>"/var/lib/logstash/plugins/inputs/file/.sincedb\_9ef76f6aaa5722c81eb9cb660b632a37", :path=\>["/var/elastik/pms02/access.log"]}  
> [2021-05-21T13:50:38,109][INFO][logstash.inputs.file][squid] No sincedb\_path set, generating one based on the "path" setting {:sincedb\_path=\>"/var/lib/logstash/plugins/inputs/file/.sincedb\_bc022acd271cc54450830240e51713f8", :path=\>["/home/jallende/proxy/access.log"]}  
> [2021-05-21T13:50:38,111][INFO][logstash.javapipeline][squid] Pipeline started {"pipeline.id"=\>"squid"}  
> [2021-05-21T13:50:38,135][INFO][filewatch.observingtail][squid][f310f544beb0fb25a5a052e372254cf1ef84bda1af8f85bb860d3a56b2867fba] START, creating Discoverer, Watch with file and sincedb collections  
> [2021-05-21T13:50:38,136][INFO][filewatch.observingtail][squid][2672c03cfc8a738f179cf98f26c62a0bf8bc39fdfed0a326e19f03b9a0413c78] START, creating Discoverer, Watch with file and sincedb collections

this is the configuration for the index

logstash.conf

input {

```
    file {
          path => "/home/jallende/proxy/access.log"
    start_position => "beginning"
    tags=> ["prueba"]
    }

     file {
          path => "/var/elastik/pms02/access.log"
    start_position => "beginning"
    tags=> ["pms02"]
    }

}
filter {
        grok {

match => ["message","%{NUMBER:timestamp}%{SPACE}%{NUMBER:duration}\s%{IP:client_address}\s%{WORD:cache_result}/%{POSINT:status_code}\s%{NUMBER:bytes}\s%{WORD:request_method}\s%{NOTSPACE:url}\s%{NOTSPACE:user}\s%{WORD:hierarchy_code}/(%{IP:dst_addrss})?%{NOTSPACE:server}\s%{NOTSPACE:content_type}"]
                }
        date {
                match => ["timestamp", "UNIX"]
                remove_field => ["timestamp"]
             }

        }

output {
  elasticsearch {
  "hosts" => "localhost:9200"
  "index" => "squid"
  }
stdout { }
}

```

But the files that were created in the server related to since are empty and there haven create the index related to squid.

any ideas?

PD: the log files has content

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [June 18, 2021, 12:33pm UTC](https://discuss.elastic.co/t/log-file-doesnt-read/273665/2 "2021-06-18T12:33:46Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.