# Logstash File output plugin - IOError: No space left on device

**URL:** <https://discuss.elastic.co/t/logstash-file-output-plugin-ioerror-no-space-left-on-device/97206>\
**Category:** Logstash\
**Created:** [August 16, 2017, 8:16am UTC](https://discuss.elastic.co/t/logstash-file-output-plugin-ioerror-no-space-left-on-device/97206 "2017-08-16T08:16:48Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![turnerj](https://avatars.discourse-cdn.com/v4/letter/t/f9ae1b/32.png) [@turnerj](https://discuss.elastic.co/u/turnerj)\
**Post date:** [August 16, 2017, 8:16am UTC](https://discuss.elastic.co/t/logstash-file-output-plugin-ioerror-no-space-left-on-device/97206/1 "2017-08-16T08:16:48Z")

</div>

Hi

I am running a Logstash 5.1.1 instance collecting and parsing syslogs. Output plugins are a combination of exec, sending syslog data to an executable, elasticsearch, and file, writing formatted output to a text file. The file output portion of the configuration file is:

```
file {
  path => "/var/log/TrapDispatcher/td_digest.log"
  codec => line {
    format => "%{syslog_timestamp} %{syslog_source} %{syslog_input_format} [%{syslog_facility}:%{syslog_severity}] %{syslog_id} %{syslog_program}[%{syslog_pid}]: %{message_content}"
  }
}

```

Everything works fine, except that at irregular intervals (sometimes hours, sometimes days), Logstash crashes with the following error:

[2017-08-16T03:19:18,506][FATAL][logstash.runner] An unexpected error occurred! {:error=\>#\<IOError: No space left on device\>, :backtrace=\>["org/jruby/RubyIO.java:1431:in `write'", "/apps/nm/elk/logstash/vendor/bundle/jruby/1.9/gems/logstash-output-file-4.0.2/lib/logstash/outputs/file.rb:296:in`write'", "/apps/nm/elk/logstash/vendor/bundle/jruby/1.9/gems/logstash-output-file-4.0.2/lib/logstash/outputs/file.rb:133:in `multi_receive_encoded'", "org/jruby/RubyArray.java:1613:in`each'", "/apps/nm/elk/logstash/vendor/bundle/jruby/1.9/gems/logstash-output-file-4.0.2/lib/logstash/outputs/file.rb:133:in `multi_receive_encoded'", "org/jruby/RubyHash.java:1342:in`each'", "/apps/nm/elk/logstash/vendor/bundle/jruby/1.9/gems/logstash-output-file-4.0.2/lib/logstash/outputs/file.rb:131:in `multi_receive_encoded'", "org/jruby/ext/thread/Mutex.java:149:in`synchronize'", "/apps/nm/elk/logstash/vendor/bundle/jruby/1.9/gems/logstash-output-file-4.0.2/lib/logstash/outputs/file.rb:130:in `multi_receive_encoded'", "/apps/nm/elk/logstash/logstash-core/lib/logstash/outputs/base.rb:90:in`multi\_receive'", "/apps/nm/elk/logstash/logstash-core/lib/logstash/output\_delegator\_strategies/shared.rb:13:in `multi_receive'", "/apps/nm/elk/logstash/logstash-core/lib/logstash/output_delegator.rb:47:in`multi\_receive'", "/apps/nm/elk/logstash/logstash-core/lib/logstash/pipeline.rb:420:in `output_batch'", "org/jruby/RubyHash.java:1342:in`each'", "/apps/nm/elk/logstash/logstash-core/lib/logstash/pipeline.rb:419:in `output_batch'", "/apps/nm/elk/logstash/logstash-core/lib/logstash/pipeline.rb:365:in`worker\_loop'", "/apps/nm/elk/logstash/logstash-core/lib/logstash/pipeline.rb:330:in `start\_workers'"]}

There is plenty of space left on the disk, and if I restart Logstash after the crash (without freeing up any disk space), it runs again perfectly until the next crash.

Has this been seen before? Is it a known problem? I have no idea how to debug this.

Thanks.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [September 13, 2017, 8:17am UTC](https://discuss.elastic.co/t/logstash-file-output-plugin-ioerror-no-space-left-on-device/97206/2 "2017-09-13T08:17:40Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.