# Logstash pipeline is starting but not executing

**URL:** <https://discuss.elastic.co/t/logstash-pipeline-is-starting-but-not-executing/52288>\
**Category:** Logstash\
**Created:** [June 9, 2016, 6:57am UTC](https://discuss.elastic.co/t/logstash-pipeline-is-starting-but-not-executing/52288 "2016-06-09T06:57:14Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![ELK1](https://avatars.discourse-cdn.com/v4/letter/e/2bfe46/32.png) [@ELK1](https://discuss.elastic.co/u/ELK1)\
**Post date:** [June 9, 2016, 6:57am UTC](https://discuss.elastic.co/t/logstash-pipeline-is-starting-but-not-executing/52288/1 "2016-06-09T06:57:14Z")

</div>

Hi

## My logstash config file is

input {  
file {  
path =\> "/home/Esearch/inp-lgstsh"  
start\_position =\> "beginning"  
ignore\_older =\> 0  
}  
}  
filter {  
if [path] =~ "access" {  
mutate { replace =\> { "type" =\> "apache\_access" } }  
grok {  
match =\> { "message" =\> "%{COMBINEDAPACHELOG}" }  
}  
}  
geoip {  
source =\> "clientip"  
}  
date {  
match =\> ["timestamp" , "YYYY-mm-dd HH:mm:ss Z"]  
}  
}

output {  
elasticsearch {

# protocol =\> http

```
hosts => ["localhost:9200"]
index => "%{[@metadata][beat]}-%{+YYYY.MM.dd}"

```

## } stdout { codec =\> rubydebug } }

## Input file is 2016-06-05 02:42:55,664 INFO BlockStateChange: BLOCK\* processReport: from DatanodeRegistration(87.987.65.34, storageID=DS-1921357720-127.0.0.1-50010-1384944321031, infoPort=50075, ipcPort=50020, storageInfo=lv=-40;cid=CID-5058f35e-cc62-4ee5-be05-a5ec592d9238;nsid=2087330736;c=0), blocks: 647, processing time: 6 msecs

when executing bin/logstash -f logstash.config -

Settings: Default pipeline workers: 4  
Pipeline main started

and it is not executing furthur.

Can i get reason for this abnormal behaviour.

Thanks in advance

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [June 9, 2016, 7:06am UTC](https://discuss.elastic.co/t/logstash-pipeline-is-starting-but-not-executing/52288/2 "2016-06-09T07:06:14Z")

</div>

Logstash is probably tailing the file. Shutting down Logstash, clearing the sincedb file used for the input file, and restarting Logstash should fix the problem.

---

<div class="post-metadata">

**Author:** ![ELK1](https://avatars.discourse-cdn.com/v4/letter/e/2bfe46/32.png) [@ELK1](https://discuss.elastic.co/u/ELK1)\
**Post date:** [June 9, 2016, 7:25am UTC](https://discuss.elastic.co/t/logstash-pipeline-is-starting-but-not-executing/52288/3 "2016-06-09T07:25:30Z")

</div>

Hi  
I restarted logstash and cleared sincedb file. But still problem persists.  
Please help me on this.  
And what is this sincedb file created?

Thanks in advance

---

<div class="post-metadata">

**Author:** ![ELK1](https://avatars.discourse-cdn.com/v4/letter/e/2bfe46/32.png) [@ELK1](https://discuss.elastic.co/u/ELK1)\
**Post date:** [June 9, 2016, 9:56am UTC](https://discuss.elastic.co/t/logstash-pipeline-is-starting-but-not-executing/52288/4 "2016-06-09T09:56:48Z")

</div>

Hi

I am new to logstash.  
Actually when I change input file it is working but not with the same input file.  
Can you explain me the reason and also about sincedb file.

Thanks in advance

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [June 9, 2016, 8:08pm UTC](https://discuss.elastic.co/t/logstash-pipeline-is-starting-but-not-executing/52288/5 "2016-06-09T20:08:46Z")

</div>

The file input's documentation describes what sincedb is and how it works.

---

<div class="post-metadata">

**Author:** ![cykuah](https://avatars.discourse-cdn.com/v4/letter/c/97f17d/32.png) [@cykuah](https://discuss.elastic.co/u/cykuah)\
**Post date:** [June 10, 2016, 3:28am UTC](https://discuss.elastic.co/t/logstash-pipeline-is-starting-but-not-executing/52288/6 "2016-06-10T03:28:57Z")

</div>

Hi

I m new to ELK too and having same issue here. after clearing sincedb. it is still same not running

---

<div class="post-metadata">

**Author:** ![ELK1](https://avatars.discourse-cdn.com/v4/letter/e/2bfe46/32.png) [@ELK1](https://discuss.elastic.co/u/ELK1)\
**Post date:** [June 10, 2016, 7:43am UTC](https://discuss.elastic.co/t/logstash-pipeline-is-starting-but-not-executing/52288/7 "2016-06-10T07:43:27Z")

</div>

Hi

Try changing the input file to another file.

sincedb is the registry which consists of inode number,major device number,minimum device number,byte offset.  
Due to Byte offset, logstash may be tailing in the file given as input.  
Once logged by logstash,it cant be taken by logstash until either new logs should be added to input file or input file need to be changed to another file.

Hope this helps.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 4:53am UTC](https://discuss.elastic.co/t/logstash-pipeline-is-starting-but-not-executing/52288/8 "2017-07-06T04:53:43Z")

</div>


