# Logstash can not read \*.log

**URL:** https://discuss.elastic.co/t/logstash-can-not-read-log/159138
**Category:** Logstash
**Created:** [December 3, 2018, 10:13am UTC](https://discuss.elastic.co/t/logstash-can-not-read-log/159138 "2018-12-03T10:13:57Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![Chunbo\_Liao](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/chunbo_liao/32/48172_2.png) [@Chunbo\_Liao](https://discuss.elastic.co/u/Chunbo_Liao)
#### Post date: [December 3, 2018, 10:13am UTC](https://discuss.elastic.co/t/logstash-can-not-read-log/159138/1 "2018-12-03T10:13:57Z")

</div>

could some one help to check this issue:

when I run logstash to get data from \*.log file (I used nfs3 to map HDFS file to local file). the error logs like as bellow:

[2018-12-03T14:37:14,153][ERROR][filewatch.tailmode.handlers.grow] read\_to\_eof: general error reading /home/11thone/caselog/logmonster/CAS-188222-B5Z9/MME52/CPPU6/TrHandlerSnapshot4.log {"error"=\>"#\<SystemCallError: Unknown error (SystemCallError) - /home/11thone/caselog/logmonster/CAS-188222-B5Z9/MME52/CPPU6/TrHandlerSnapshot4.log\>", "backtrace"=\>["org/jruby/RubyIO.java:2958:in `sysread'", "/home/11thone/elk/logstash/vendor/bundle/jruby/2.3.0/gems/logstash-input-file-4.1.6/lib/filewatch/watched_file.rb:224:in`file\_read'", "/home/11thone/elk/logstash/vendor/bundle/jruby/2.3.0/gems/logstash-input-file-4.1.6/lib/filewatch/watched\_file.rb:236:in `read_extract_lines'", "/home/11thone/elk/logstash/vendor/bundle/jruby/2.3.0/gems/logstash-input-file-4.1.6/lib/filewatch/tail_mode/handlers/base.rb:52:in`block in controlled\_read'"]}

BR  
Liao

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [December 31, 2018, 10:22am UTC](https://discuss.elastic.co/t/logstash-can-not-read-log/159138/2 "2018-12-31T10:22:56Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
