# Logstash doesn't read an input file :/ **URL:** \ **Category:** Logstash\ **Created:** [July 31, 2017, 6:50pm UTC](https://discuss.elastic.co/t/logstash-doesnt-read-an-input-file/95231 "2017-07-31T18:50:21Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![abed85](https://avatars.discourse-cdn.com/v4/letter/a/3bc359/32.png) [@abed85](https://discuss.elastic.co/u/abed85)\ **Post date:** [July 31, 2017, 6:50pm UTC](https://discuss.elastic.co/t/logstash-doesnt-read-an-input-file/95231/1 "2017-07-31T18:50:21Z")
Hello , I am trying to use Docker ELK stack to visualize the log of openvswitch. My problem with logstash that it doesn't read the log file. in the /logstash/pipeline/logstash.conf I added ``` input { file { path => "/var/log/openvswitch/ovs-ctl.log" tags => "openvswitch" type => "openvswitch" } } ``` when I am running the stack It doesn't read that file. I tried with another simple file in different location and also It doesn't read that file. I have: ``` logstash_1 | Sending Logstash's logs to /usr/share/logstash/logs which is now configured via log4j2.properties logstash_1 | [2017-07-31T18:07:52,990][INFO][logstash.outputs.elasticsearch] Elasticsearch pool URLs updated {:changes=>{:removed=>[], :added=>[http://elasticsearch:9200/]}} logstash_1 | [2017-07-31T18:07:52,997][INFO][logstash.outputs.elasticsearch] Running health check to see if an Elasticsearch connection is working {:healthcheck_url=>http://elasticsearch:9200/, :path=>"/"} logstash_1 | [2017-07-31T18:07:53,187][WARN][logstash.outputs.elasticsearch] Restored connection to ES instance {:url=>#} logstash_1 | [2017-07-31T18:07:53,190][INFO][logstash.outputs.elasticsearch] Using mapping template from {:path=>nil} logstash_1 | [2017-07-31T18:07:53,310][INFO][logstash.outputs.elasticsearch] Attempting to install template {:manage_template=>{"template"=>"logstash-*", "version"=>50001, "settings"=>{"index.refresh_interval"=>"5s"}, "mappings"=>{"_default_"=>{"_all"=>{"enabled"=>true, "norms"=>false}, "dynamic_templates"=>[{"message_field"=>{"path_match"=>"message", "match_mapping_type"=>"string", "mapping"=>{"type"=>"text", "norms"=>false}}}, {"string_fields"=>{"match"=>"*", "match_mapping_type"=>"string", "mapping"=>{"type"=>"text", "norms"=>false, "fields"=>{"keyword"=>{"type"=>"keyword"}}}}}], "properties"=>{"@timestamp"=>{"type"=>"date", "include_in_all"=>false}, "@version"=>{"type"=>"keyword", "include_in_all"=>false}, "geoip"=>{"dynamic"=>true, "properties"=>{"ip"=>{"type"=>"ip"}, "location"=>{"type"=>"geo_point"}, "latitude"=>{"type"=>"half_float"}, "longitude"=>{"type"=>"half_float"}}}}}}}} logstash_1 | [2017-07-31T18:07:53,324][INFO][logstash.outputs.elasticsearch] New Elasticsearch output {:class=>"LogStash::Outputs::ElasticSearch", :hosts=>[#]} logstash_1 | [2017-07-31T18:07:53,334][INFO][logstash.pipeline] Starting pipeline {"id"=>"main", "pipeline.workers"=>4, "pipeline.batch.size"=>125, "pipeline.batch.delay"=>5, "pipeline.max_inflight"=>500} logstash_1 | [2017-07-31T18:07:53,828][INFO][logstash.inputs.tcp] Starting tcp input listener {:address=>"0.0.0.0:5000"} logstash_1 | [2017-07-31T18:07:53,849][INFO][logstash.pipeline] Pipeline main started logstash_1 | [2017-07-31T18:07:54,041][INFO][logstash.agent] Successfully started Logstash API endpoint {:port=>9600} ``` Thank you in advance, ---
**Author:** ![CDR](https://avatars.discourse-cdn.com/v4/letter/c/d9b06d/32.png) [@CDR](https://discuss.elastic.co/u/CDR)\ **Post date:** [August 2, 2017, 8:57pm UTC](https://discuss.elastic.co/t/logstash-doesnt-read-an-input-file/95231/2 "2017-08-02T20:57:17Z")
Can you attach your configuration file? ---
**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\ **Post date:** [August 3, 2017, 8:10am UTC](https://discuss.elastic.co/t/logstash-doesnt-read-an-input-file/95231/3 "2017-08-03T08:10:45Z")
Does /var/log/openvswitch/ovs-ctl.log exist inside the Logstash Docker container? ---
**Author:** ![abed85](https://avatars.discourse-cdn.com/v4/letter/a/3bc359/32.png) [@abed85](https://discuss.elastic.co/u/abed85)\ **Post date:** [August 3, 2017, 4:16pm UTC](https://discuss.elastic.co/t/logstash-doesnt-read-an-input-file/95231/4 "2017-08-03T16:16:45Z")
``` input { tcp { port => 5000 } file { path => "/var/log/openvswitch/ovs-ctl.log" tags => "openvswitch" type => "openvswitch" } } output { elasticsearch { hosts => "elasticsearch:9200" } } ``` ---
**Author:** ![abed85](https://avatars.discourse-cdn.com/v4/letter/a/3bc359/32.png) [@abed85](https://discuss.elastic.co/u/abed85)\ **Post date:** [August 3, 2017, 4:19pm UTC](https://discuss.elastic.co/t/logstash-doesnt-read-an-input-file/95231/5 "2017-08-03T16:19:26Z")
No... but It's on the same device. Why and how it should be in the Logstash Docker container? ---
**Author:** ![CDR](https://avatars.discourse-cdn.com/v4/letter/c/d9b06d/32.png) [@CDR](https://discuss.elastic.co/u/CDR)\ **Post date:** [August 3, 2017, 4:32pm UTC](https://discuss.elastic.co/t/logstash-doesnt-read-an-input-file/95231/6 "2017-08-03T16:32:45Z")
I had the same issue with running Logstash using Docker. The container's files are separate from the files on the device unless you mount a volume containing the files you wish to parse. Basically logstash is looking within the containers file system to find the file you are specifying. It cannot find that file because it does not exist within that container. Read more about how to create a container [here](https://docs.docker.com/engine/reference/commandline/volume_create/#related-commands). ---
**Author:** ![abed85](https://avatars.discourse-cdn.com/v4/letter/a/3bc359/32.png) [@abed85](https://discuss.elastic.co/u/abed85)\ **Post date:** [August 3, 2017, 6:30pm UTC](https://discuss.elastic.co/t/logstash-doesnt-read-an-input-file/95231/7 "2017-08-03T18:30:50Z")
Many Thanks @CDR !!! Problem solved You are right... I mounted the file to a "mediator" volume in the container (I used /usr/share/logstash/docs) and I modified the path of the input file to the mediator path. Cheers! ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [August 31, 2017, 6:30pm UTC](https://discuss.elastic.co/t/logstash-doesnt-read-an-input-file/95231/8 "2017-08-31T18:30:52Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.