# Logstash S3 input + Looking Path object

**URL:** <https://discuss.elastic.co/t/logstash-s3-input-looking-path-object/57843>\
**Category:** Logstash\
**Created:** [August 11, 2016, 5:41pm UTC](https://discuss.elastic.co/t/logstash-s3-input-looking-path-object/57843 "2016-08-11T17:41:28Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![sarthak2016](https://avatars.discourse-cdn.com/v4/letter/s/d26b3c/32.png) [@sarthak2016](https://discuss.elastic.co/u/sarthak2016)\
**Post date:** [August 11, 2016, 5:41pm UTC](https://discuss.elastic.co/t/logstash-s3-input-looking-path-object/57843/1 "2016-08-11T17:41:28Z")

</div>

Hello All,

I have replace my old input with Amazon S3 input because i Need to read CSVs from S3 bucket instead of my local drive.

Old Input syntax (Read CSVs from my local)

input  
{  
file  
{  
sincedb\_path =\> '/dev/null'  
path =\> "C:/logstash-2.3.1/logstash-2.3.1/abc/allcsv/\*.csv"  
start\_position =\> beginning  
ignore\_older =\> 0  
}  
}

Updated Input syntax (Read CSVs from S3)

input  
{

```
s3
{
  access_key_id => "XXXXXXX"
  secret_access_key => "XXXXXXXXXXXXXXXXXXXXXXXXXXXX"
  bucket => "abc"
  prefix => "allcsv/"
  delete => false
  interval => 60 # seconds
  sincedb_path => '/dev/null'
  
}

```

}

Example

Path has value  
C:/logstash-2.3.1/logstash-2.3.1/abc/allcsv/AppInfo\_07112016 104337.csv

grok filter as below  
grok  
{  
match =\> ["path", "%{GREEDYDATA:CName}/%{GREEDYDATA:FName}/%{GREEDYDATA:pathtype}\_%{GREEDYDATA:pathlast}"]  
}

Problem:  
S3 dont have path object, I need path object because i have used grok filter into filter section and i need full file path (Couple of logics/Fields will be added at runtime).  
How can i get path/filepath using S3 input ?  
Is there a way to get path/filepath into Filter section ?  
Is there any inbuild/local variable/object holds path value ?

Thanks for your help in advance,

---

<div class="post-metadata">

**Author:** ![JMeter\_Dude](https://avatars.discourse-cdn.com/v4/letter/j/b77776/32.png) [@JMeter\_Dude](https://discuss.elastic.co/u/JMeter_Dude)\
**Post date:** [November 23, 2016, 6:56am UTC](https://discuss.elastic.co/t/logstash-s3-input-looking-path-object/57843/2 "2016-11-23T06:56:16Z")

</div>

Were you able to solve your issue?

---

<div class="post-metadata">

**Author:** ![sarthak2016](https://avatars.discourse-cdn.com/v4/letter/s/d26b3c/32.png) [@sarthak2016](https://discuss.elastic.co/u/sarthak2016)\
**Post date:** [June 21, 2017, 5:00pm UTC](https://discuss.elastic.co/t/logstash-s3-input-looking-path-object/57843/3 "2017-06-21T17:00:47Z")

</div>

Yes, I updated S3.rb into Logstassh folder,

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 4, 2022, 4:26am UTC](https://discuss.elastic.co/t/logstash-s3-input-looking-path-object/57843/4 "2022-11-04T04:26:17Z")

</div>