# Logstash doesn't read file from beginning

**URL:** <https://discuss.elastic.co/t/logstash-doesnt-read-file-from-beginning/81487>\
**Category:** Logstash\
**Created:** [April 6, 2017, 2:36pm UTC](https://discuss.elastic.co/t/logstash-doesnt-read-file-from-beginning/81487 "2017-04-06T14:36:08Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![luciferdude](https://avatars.discourse-cdn.com/v4/letter/l/f19dbf/32.png) [@luciferdude](https://discuss.elastic.co/u/luciferdude)\
**Post date:** [April 6, 2017, 2:36pm UTC](https://discuss.elastic.co/t/logstash-doesnt-read-file-from-beginning/81487/1 "2017-04-06T14:36:08Z")

</div>

I'm installed logstash on one of our linux server and i'm trying to forward application log to ES and visualize in Kibana.

Any New Line being written to the log are being visualized but the file from beginning is not being read. Here is my config, please advise if there's anything wrong with my config.

```
input {
    file {
            start_position => "beginning"
            path => "/var/log/app/access.log"
            type => "app"
            }
 }

output {
if [type] == "app" {
elasticsearch {
    hosts => ["<i.p>:9200"]
    manage_template => false
    index => "logstash-%{+YYYY.MM.dd}"
  }
}
}
```

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [April 6, 2017, 2:48pm UTC](https://discuss.elastic.co/t/logstash-doesnt-read-file-from-beginning/81487/2 "2017-04-06T14:48:16Z")

</div>

Read what the documentation and many many previous threads say about sincedb.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 4, 2017, 2:48pm UTC](https://discuss.elastic.co/t/logstash-doesnt-read-file-from-beginning/81487/3 "2017-05-04T14:48:27Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.