# Logstash not showing out put again

**URL:** https://discuss.elastic.co/t/logstash-not-showing-out-put-again/48279
**Category:** Logstash
**Created:** [April 25, 2016, 7:24am UTC](https://discuss.elastic.co/t/logstash-not-showing-out-put-again/48279 "2016-04-25T07:24:49Z")
**Posts on this page:** 14
**Page:** 1

<div class="post-metadata">

### Author: ![sarbjeet](https://avatars.discourse-cdn.com/v4/letter/s/e5b9ba/32.png) [@sarbjeet](https://discuss.elastic.co/u/sarbjeet)
#### Post date: [April 25, 2016, 7:24am UTC](https://discuss.elastic.co/t/logstash-not-showing-out-put-again/48279/1 "2016-04-25T07:24:49Z")

</div>

hi...  
when i run logstash config file .it display output but when we run it again then no output displayed.  
its new for me.  
i installed logstash 2.2,elasticsearch 2.2 and kibana 1.4.  
plz reply soon .its urgent.

---

<div class="post-metadata">

### Author: ![sarbjeet](https://avatars.discourse-cdn.com/v4/letter/s/e5b9ba/32.png) [@sarbjeet](https://discuss.elastic.co/u/sarbjeet)
#### Post date: [April 25, 2016, 7:25am UTC](https://discuss.elastic.co/t/logstash-not-showing-out-put-again/48279/2 "2016-04-25T07:25:56Z")

</div>

plz reply soon.

---

<div class="post-metadata">

### Author: ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [April 25, 2016, 8:11pm UTC](https://discuss.elastic.co/t/logstash-not-showing-out-put-again/48279/3 "2016-04-25T20:11:16Z")

</div>

> when i run logstash config file .it display output but when we run it again then no output displayed.

It's completely impossible to help without any details. What's your configuration, for example?

> plz reply soon.

Have patience. If patience is scarce there are paid support subscriptions. Regardless of what channel you use to get help, you _must_ realize that it's in your best interest to ask as clear of a question as possible.

---

<div class="post-metadata">

### Author: ![sarbjeet](https://avatars.discourse-cdn.com/v4/letter/s/e5b9ba/32.png) [@sarbjeet](https://discuss.elastic.co/u/sarbjeet)
#### Post date: [April 26, 2016, 4:23am UTC](https://discuss.elastic.co/t/logstash-not-showing-out-put-again/48279/4 "2016-04-26T04:23:52Z")

</div>

ok.  
my config file is:-  
input {  
file {  
path =\> "/etc/record.csv"  
start\_position =\> "beginning"  
}  
}  
output{  
stdout{ codec =\> rubydebug}  
}

/opt/logstash/bin/logstash -f first.conf -v  
Settings: Default pipeline workers: 1  
Registering file input {:path=\>["/etc/record.csv"], :level=\>:info}  
No sincedb\_path set, generating one based on the file path {:sincedb\_path=\>"/home/sab/.sincedb\_166abf361ebae2343c43ab4612b6db74", :path=\>["/etc/record.csv"], :level=\>:info}  
Starting pipeline {:id=\>"base", :pipeline\_workers=\>1, :batch\_size=\>125, :batch\_delay=\>5, :max\_inflight=\>125, :level=\>:info}  
Pipeline started {:level=\>:info}  
Logstash startup completed  
^CSIGINT received. Shutting down the pipeline. {:level=\>:warn}  
Closing inputs {:level=\>:info}  
Closed inputs {:level=\>:info}  
Input plugins stopped! Will shutdown filter/output workers. {:level=\>:info}  
Pipeline shutdown complete. {:level=\>:info}  
Logstash shutdown completed

---

<div class="post-metadata">

### Author: ![sarbjeet](https://avatars.discourse-cdn.com/v4/letter/s/e5b9ba/32.png) [@sarbjeet](https://discuss.elastic.co/u/sarbjeet)
#### Post date: [April 26, 2016, 5:09am UTC](https://discuss.elastic.co/t/logstash-not-showing-out-put-again/48279/5 "2016-04-26T05:09:27Z")

</div>

when i use this command:-cat /etc/record.csv |/opt/logstash/bin/logstash -f first.conf -v  
it works properly.  
and my config file is:-  
input {  
stdin{}  
}  
output{  
stdout{ codec =\> rubydebug}  
}

---

<div class="post-metadata">

### Author: ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [April 26, 2016, 5:29am UTC](https://discuss.elastic.co/t/logstash-not-showing-out-put-again/48279/6 "2016-04-26T05:29:39Z")

</div>

Presumably the sincedb file (whose path is in the log) indicates that Logstash already has processed the file in question. In that case you have to delete the sincedb file to have Logstash process the file again.

---

<div class="post-metadata">

### Author: ![sarbjeet](https://avatars.discourse-cdn.com/v4/letter/s/e5b9ba/32.png) [@sarbjeet](https://discuss.elastic.co/u/sarbjeet)
#### Post date: [April 27, 2016, 5:36am UTC](https://discuss.elastic.co/t/logstash-not-showing-out-put-again/48279/7 "2016-04-27T05:36:25Z")

</div>

beat installation is necessary for viewing data in elk.  
can we view pcap data in elk.

---

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [April 27, 2016, 5:39am UTC](https://discuss.elastic.co/t/logstash-not-showing-out-put-again/48279/8 "2016-04-27T05:39:57Z")

</div>

> [@sarbjeet](#):
>
> beat installation is necessary for viewing data in elk.

No, it's not.

> [@sarbjeet](#):
>
> can we view pcap data in elk.

I have seen people do this, I am sure if you run a search on the net for the topic you will find something.

---

<div class="post-metadata">

### Author: ![sarbjeet](https://avatars.discourse-cdn.com/v4/letter/s/e5b9ba/32.png) [@sarbjeet](https://discuss.elastic.co/u/sarbjeet)
#### Post date: [April 27, 2016, 5:41am UTC](https://discuss.elastic.co/t/logstash-not-showing-out-put-again/48279/9 "2016-04-27T05:41:58Z")

</div>

i create config file and works properly and its data display in kibana.but when i run it again then no changes display

---

<div class="post-metadata">

### Author: ![sarbjeet](https://avatars.discourse-cdn.com/v4/letter/s/e5b9ba/32.png) [@sarbjeet](https://discuss.elastic.co/u/sarbjeet)
#### Post date: [April 27, 2016, 5:44am UTC](https://discuss.elastic.co/t/logstash-not-showing-out-put-again/48279/10 "2016-04-27T05:44:27Z")

</div>

ok.thanks

---

<div class="post-metadata">

### Author: ![sarbjeet](https://avatars.discourse-cdn.com/v4/letter/s/e5b9ba/32.png) [@sarbjeet](https://discuss.elastic.co/u/sarbjeet)
#### Post date: [April 27, 2016, 6:57am UTC](https://discuss.elastic.co/t/logstash-not-showing-out-put-again/48279/11 "2016-04-27T06:57:47Z")

</div>

my config file is  
input {  
file {  
path =\> "/Desktop/datacsv.csv"  
start\_position =\> "beginning"  
sincedb\_path =\> "/home/sab/null"  
}  
}  
output {  
stdout{codec =\> rubydebug}  
}

output is:-  
Registering file input {:path=\>["/Desktop/datacsv.csv"], :level=\>:info}  
Pipeline started {:level=\>:info}  
Logstash startup completed  
^CSIGINT received. Shutting down the pipeline. {:level=\>:warn}  
Sending shutdown signal to input thread {:thread=\>#\<Thread:0x70d1319 sleep\>, :level=\>:info}  
Plugin is finished {:plugin=\>\<LogStash::Outputs::Stdout codec=\>\<LogStash::Codecs::RubyDebug metadata=\>false\>, workers=\>1\>, :level=\>:info}  
Pipeline shutdown complete. {:level=\>:info}

---

<div class="post-metadata">

### Author: ![sarbjeet](https://avatars.discourse-cdn.com/v4/letter/s/e5b9ba/32.png) [@sarbjeet](https://discuss.elastic.co/u/sarbjeet)
#### Post date: [April 27, 2016, 7:09am UTC](https://discuss.elastic.co/t/logstash-not-showing-out-put-again/48279/12 "2016-04-27T07:09:30Z")

</div>

when i run :-  
cat /etc/datacsv.csv | /opt/logstash/bin/logstash -f newf.conf -v  
config file is:-  
input {  
stdin{}  
}  
filter {  
csv {  
separator =\> ","  
columns =\> ["No.","Time","Source","Destination","Protocol","Length","Info"]  
}  
mutate {convert =\> ["Source", "float"]}  
mutate {convert =\> ["Destination", "float"]}  
mutate {convert =\> ["Protocol", "float"]}

}  
output {  
stdout{codec =\> rubydebug}  
}

output display correctly.

---

<div class="post-metadata">

### Author: ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [April 27, 2016, 7:44am UTC](https://discuss.elastic.co/t/logstash-not-showing-out-put-again/48279/13 "2016-04-27T07:44:18Z")

</div>

> sincedb\_path =\> "/home/sab/null"

Was your intention with this to disable sincedb? It doesn't. Use /dev/null if you want to disable sincedb.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 6, 2017, 5:00am UTC](https://discuss.elastic.co/t/logstash-not-showing-out-put-again/48279/14 "2017-07-06T05:00:22Z")

</div>


