# Logstash not reading more than 2 input file

**URL:** https://discuss.elastic.co/t/logstash-not-reading-more-than-2-input-file/94874
**Category:** Logstash
**Created:** [July 27, 2017, 10:47pm UTC](https://discuss.elastic.co/t/logstash-not-reading-more-than-2-input-file/94874 "2017-07-27T22:47:21Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![P\_Kumar](https://avatars.discourse-cdn.com/v4/letter/p/c4cdca/32.png) [@P\_Kumar](https://discuss.elastic.co/u/P_Kumar)
#### Post date: [July 27, 2017, 10:47pm UTC](https://discuss.elastic.co/t/logstash-not-reading-more-than-2-input-file/94874/1 "2017-07-27T22:47:22Z")

</div>

Hi ,  
I am new to ELK , i am trying to read the logs for IBM dmgr ,node and Application logs . but it is reading top 2 file input and creating index but 3rd file is not creating index and not reading could you please help me .  
Below is my logstash config file .

input {  
file {  
path =\> ["/opt/WebSphere/AppServer8.5.5/profiles/x.x.x.xManager/logs/dmgr/SystemOut.log"]  
start\_position =\> "beginning"  
type =\> "websphere1"  
# important! logstash read only logs from files touched the last 24 hours  
# 8640000 = 100 days  
ignore\_older =\> "8640000"  
codec =\> multiline {  
pattern =\> "^\s"  
what =\> "previous"  
}  
}file {  
path =\> ["/opt/WebSphere/AppServer8.5.5/profiles/x.x.x.x/logs/nodeagent/SystemOut.log"]  
start\_position =\> "beginning"  
type =\> "app1"  
# 8640000 = 100 days  
ignore\_older =\> "8640000"  
codec =\> multiline {  
pattern =\> "^\s"  
what =\> "previous"  
}  
}file {  
path =\> ["/opt/WebSphere/AppServer8.5.5/profiles/x.x.x.x/logs/ActiveVOS-v01/SystemOut.log"]  
start\_position =\> "beginning"  
type =\> "websphere"  
# 8640000 = 100 days  
ignore\_older =\> "86400"  
codec =\> multiline {  
pattern =\> "^\s"  
what =\> "previous"  
}  
}  
}  
output {  
if [type] == "websphere1" {  
elasticsearch{  
hosts =\> ["x.x.x.x:9200"]  
index =\> "x.x.x.x\_dmgr1\_%{+YYYY.MM.dd}"  
}  
}  
if [type] == "app1" {  
elasticsearch{  
hosts =\> ["x.x.x.x:9200"]  
index =\> "x.x.x.x\_node\_%{+YYYY.MM.dd}"  
}  
} else if [type] == "websphere" {  
elasticsearch{  
hosts =\> ["x.x.x.x:9200"]  
index =\> "x.x.x.x\_ActiveVOS-v01\_%{+YYYY.MM.dd}"  
}  
}else {  
stdout{  
codec =\> rubydebug  
}  
}  
}

Thanks in advance...

---

<div class="post-metadata">

### Author: ![P\_Kumar](https://avatars.discourse-cdn.com/v4/letter/p/c4cdca/32.png) [@P\_Kumar](https://discuss.elastic.co/u/P_Kumar)
#### Post date: [August 1, 2017, 3:04am UTC](https://discuss.elastic.co/t/logstash-not-reading-more-than-2-input-file/94874/2 "2017-08-01T03:04:04Z")

</div>

Please help me on this issue ..

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [August 29, 2017, 3:07am UTC](https://discuss.elastic.co/t/logstash-not-reading-more-than-2-input-file/94874/3 "2017-08-29T03:07:58Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.