# Logstash Index error : \[logstash-\*\] IndexNotFoundException\[no such index\]

**URL:** <https://discuss.elastic.co/t/logstash-index-error-logstash-indexnotfoundexception-no-such-index/37857>\
**Category:** Logstash\
**Created:** [December 23, 2015, 12:43pm UTC](https://discuss.elastic.co/t/logstash-index-error-logstash-indexnotfoundexception-no-such-index/37857 "2015-12-23T12:43:23Z")\
**Posts on this page:** 9\
**Page:** 2

<div class="post-metadata">

**Author:** ![carmelom](https://avatars.discourse-cdn.com/v4/letter/c/e19adc/32.png) [@carmelom](https://discuss.elastic.co/u/carmelom)\
**Post date:** [January 12, 2016, 12:41pm UTC](https://discuss.elastic.co/t/logstash-index-error-logstash-indexnotfoundexception-no-such-index/37857/21 "2016-01-12T12:41:23Z")

</div>

Hi @yahoo,  
Did you resolve this problem : "_Logstash is run it will start reading from the beginning of the file._

if yes, could you explain to me how, please ?

---

<div class="post-metadata">

**Author:** ![yahoo](https://avatars.discourse-cdn.com/v4/letter/y/898d66/32.png) [@yahoo](https://discuss.elastic.co/u/yahoo)\
**Post date:** [January 13, 2016, 8:06pm UTC](https://discuss.elastic.co/t/logstash-index-error-logstash-indexnotfoundexception-no-such-index/37857/22 "2016-01-13T20:06:33Z")

</div>

Yes. I did. after many trials and roaming through the web.  
I am in a windows environment.  
What worked for me is the sincedb path points o a file in an area that I have permission for r/w/m

```
sincedb_path => "D:\dir1\dir2\..\.sincedb_gpuz" 

```

Please let me know if it works for you

---

<div class="post-metadata">

**Author:** ![carmelom](https://avatars.discourse-cdn.com/v4/letter/c/e19adc/32.png) [@carmelom](https://discuss.elastic.co/u/carmelom)\
**Post date:** [January 14, 2016, 11:25am UTC](https://discuss.elastic.co/t/logstash-index-error-logstash-indexnotfoundexception-no-such-index/37857/23 "2016-01-14T11:25:49Z")

</div>

Thank you,  
I did the same but I made a mistake see my post :  
[Duplicated logs from logstash after append logs - #5 by carmelom](https://discuss.elastic.co/t/duplicated-logs-from-logstash-after-append-logs/39097/5)

and I sort it out with this command line :

> echo "test log message" \>\> logfile.log

PS: my logstash is not working very well in Windows and I moved to Ubuntu and it is easier to manage

---

<div class="post-metadata">

**Author:** ![rgovinda](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rgovinda/32/75643_2.png) [@rgovinda](https://discuss.elastic.co/u/rgovinda)\
**Post date:** [January 20, 2016, 4:53am UTC](https://discuss.elastic.co/t/logstash-index-error-logstash-indexnotfoundexception-no-such-index/37857/24 "2016-01-20T04:53:15Z")

</div>

this is what is in my logstash-conf file. indexes are not getting created in elasticsearch. I am getting the no such index error ([http://localhost:9200/logstash-2016.01.19/\_search?q=response=200](http://localhost:9200/logstash-2016.01.19/_search?q=response=200)). I am using windows 7. what am I doing wrong? please help

input {  
file {  
path =\> "C:\Users\rx1234\Documents\tmp\logstash-tutorial"  
start\_position =\> beginning  
}  
}  
filter {  
grok {  
match =\> { "message" =\> "%{COMBINEDAPACHELOG}"}  
}  
geoip {  
source =\> "clientip"  
}  
}  
output {  
elasticsearch { hosts =\> ["localhost:9200"] }  
stdout {}  
}

---

<div class="post-metadata">

**Author:** ![carmelom](https://avatars.discourse-cdn.com/v4/letter/c/e19adc/32.png) [@carmelom](https://discuss.elastic.co/u/carmelom)\
**Post date:** [January 20, 2016, 8:40am UTC](https://discuss.elastic.co/t/logstash-index-error-logstash-indexnotfoundexception-no-such-index/37857/25 "2016-01-20T08:40:20Z")

</div>

Try to add this line in to your configuration:

> [@yahoo](#):
>
> sincedb\_path =\> "D:\dir1\dir2...sincedb\_gpuz"

or :  
`sincedb_path =>"/dev/null"` ( may is only for linux )  
or  
`sincedb_path => "null"`( may this is for windows )

then verify if logstash is creating the index :  
`curl -XGET http://localhost:9200/_cat/indices?v`  
or  
`http://localhost:9200/_cat/indices?v`

---

<div class="post-metadata">

**Author:** ![rgovinda](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rgovinda/32/75643_2.png) [@rgovinda](https://discuss.elastic.co/u/rgovinda)\
**Post date:** [January 20, 2016, 4:54pm UTC](https://discuss.elastic.co/t/logstash-index-error-logstash-indexnotfoundexception-no-such-index/37857/26 "2016-01-20T16:54:12Z")

</div>

added  
sincedb\_path =\> "null"  
to the config file. Output from logstash pasted below. Still no index. Since stdout {} statement is also there in conf file, if index did get created, shouldn't there be some stdout statements?

Any other ideas?

C:\Users\rx1234\Documents\logstash-2.1.1\bin\>logstash -f first-pipeline.conf  
io/console not supported; tty will not be manipulated  
Settings: Default filter workers: 4  
Logstash startup completed

---

<div class="post-metadata">

**Author:** ![rgovinda](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rgovinda/32/75643_2.png) [@rgovinda](https://discuss.elastic.co/u/rgovinda)\
**Post date:** [January 20, 2016, 5:10pm UTC](https://discuss.elastic.co/t/logstash-index-error-logstash-indexnotfoundexception-no-such-index/37857/27 "2016-01-20T17:10:04Z")

</div>

found the problem -- needed an extension to the input file. the ".txt" was missing earlier

logstash-tutorial-dataset.txt

---

<div class="post-metadata">

**Author:** ![ahegazi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ahegazi/32/11614_2.png) [@ahegazi](https://discuss.elastic.co/u/ahegazi)\
**Post date:** [September 3, 2016, 1:17am UTC](https://discuss.elastic.co/t/logstash-index-error-logstash-indexnotfoundexception-no-such-index/37857/28 "2016-09-03T01:17:27Z")

</div>

> [@carmelom](#):
>
> [Parsing Logs with Logstash | Logstash Reference [8.11] | Elastic](https://www.elastic.co/guide/en/logstash/current/advanced-pipeline.html)

I actually been trying this example explained here [Parsing Logs with Logstash | Logstash Reference [8.11] | Elastic](https://www.elastic.co/guide/en/logstash/current/advanced-pipeline.html)

and as most of you got the Logstash Index Error.

I added the sincedb\_path =\> "/dev/null" but no luck

only got this  
logstash-config-files]$ ../logstash-2.3.4/bin/logstash -f ./first-pipeline.conf  
Settings: Default pipeline workers: 12  
Pipeline main started  
.  
THIS WOULD stall like this for whatever it takes with no output, and while checking with the output from Elasticsearch still doesn't have index:

$ curl -XGET 'localhost:9200/logstash-$DATE/\_search?pretty&q=response=200'  
{  
"error" : {  
"root\_cause" : [ {  
"type" : "index\_not\_found\_exception",  
"reason" : "no such index",  
"resource.type" : "index\_or\_alias",  
"resource.id" : "logstash-$DATE",  
"index" : "logstash-$DATE"  
} ],  
"type" : "index\_not\_found\_exception",  
"reason" : "no such index",  
"resource.type" : "index\_or\_alias",  
"resource.id" : "logstash-$DATE",  
"index" : "logstash-$DATE"  
},  
"status" : 404  
}

FYI, using stdout {} instead of elasticsearch give me some output but I really need to test this with Elasticsearch but no luck.

bearing in mind elasticsearch is running and the log file is in the right path which I made sure of !

Thanks,

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 4:40am UTC](https://discuss.elastic.co/t/logstash-index-error-logstash-indexnotfoundexception-no-such-index/37857/29 "2017-07-06T04:40:07Z")

</div>



[Previous page](https://discuss.elastic.co/t/logstash-index-error-logstash-indexnotfoundexception-no-such-index/37857.md?page=1)
