# Logstash sincedb\_path is not working

**URL:** <https://discuss.elastic.co/t/logstash-sincedb-path-is-not-working/118918>\
**Category:** Logstash\
**Created:** [February 7, 2018, 8:05pm UTC](https://discuss.elastic.co/t/logstash-sincedb-path-is-not-working/118918 "2018-02-07T20:05:34Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![databeata](https://avatars.discourse-cdn.com/v4/letter/d/5e9695/32.png) [@databeata](https://discuss.elastic.co/u/databeata)\
**Post date:** [February 7, 2018, 8:05pm UTC](https://discuss.elastic.co/t/logstash-sincedb-path-is-not-working/118918/1 "2018-02-07T20:05:34Z")

</div>

This is not working. There is no output. I want to use sincedb\_path =\> "/mnt/elk/logstash/scripts/sincedb/from\_nifi\_dev\_logs\_nifi\_6

```
sudo rm -rf /mnt/elk/logstash/scripts/sincedb/from_nifi_dev_logs_nifi_6

sudo /usr/share/logstash/bin/logstash -e 'input { file { path => "/mnt/elk/logstash/data/from/nifi/dev/logs/nifi_copied/nifi-app.log" sincedb_path => "/mnt/elk/logstash/scripts/sincedb/from_nifi_dev_logs_nifi_6" } } output { stdout { codec => rubydebug } }' --verbose   

```

There are no sincedb files in default directory.

```
ls /usr/share/logstash/data/plugins/inputs/file
no files

```

This is working. I don't want to use start\_position =\> beginning sincedb\_path =\> "/dev/null"

```
sudo /usr/share/logstash/bin/logstash -e 'input { file { path => "/mnt/elk/logstash/data/from/nifi/dev/logs/nifi_copied/nifi-app.log" start_position => beginning sincedb_path => "/dev/null" } } output { stdout { codec => rubydebug } }' --verbose  

{
      "@version" => "1",
          "host" => "hostname",
          "path" => "/mnt/elk/logstash/data/from/nifi/dev/logs/nifi_copied/nifi-app.log",
    "@timestamp" => 2018-02-07T19:24:31.758Z,
       "message" => "Caused by: java.io.IOException: null"
}
```

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [February 7, 2018, 9:00pm UTC](https://discuss.elastic.co/t/logstash-sincedb-path-is-not-working/118918/2 "2018-02-07T21:00:57Z")

</div>

But your second attempt also has `start_position => "beginning"`.

---

<div class="post-metadata">

**Author:** ![databeata](https://avatars.discourse-cdn.com/v4/letter/d/5e9695/32.png) [@databeata](https://discuss.elastic.co/u/databeata)\
**Post date:** [February 7, 2018, 9:04pm UTC](https://discuss.elastic.co/t/logstash-sincedb-path-is-not-working/118918/3 "2018-02-07T21:04:08Z")

</div>

@magnusbaeck

Thanks.

I want to use

sincedb\_path =\> "/mnt/elk/logstash/scripts/sincedb/from\_nifi\_dev\_logs\_nifi\_6

I don't want to use

start\_position =\> beginning sincedb\_path =\> "/dev/null"

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [February 7, 2018, 9:14pm UTC](https://discuss.elastic.co/t/logstash-sincedb-path-is-not-working/118918/4 "2018-02-07T21:14:59Z")

</div>

If you want files to be read from the beginning you need `start_position => "beginning"`, but that's unrelated to the `sincedb_path` setting. Over and out.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 7, 2018, 9:15pm UTC](https://discuss.elastic.co/t/logstash-sincedb-path-is-not-working/118918/5 "2018-03-07T21:15:25Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.