# Logstash stopped working (sincedb is not updated) after upgrade from 6.2.4 –\> 6.4.0 (Update 6.5 doesn't work also)

**URL:** <https://discuss.elastic.co/t/logstash-stopped-working-sincedb-is-not-updated-after-upgrade-from-6-2-4-6-4-0-update-6-5-doesnt-work-also/161335>\
**Category:** Logstash\
**Created:** [December 18, 2018, 1:20pm UTC](https://discuss.elastic.co/t/logstash-stopped-working-sincedb-is-not-updated-after-upgrade-from-6-2-4-6-4-0-update-6-5-doesnt-work-also/161335 "2018-12-18T13:20:36Z")\
**Posts on this page:** 9\
**Page:** 4

<div class="post-metadata">

**Author:** ![RonGros](https://avatars.discourse-cdn.com/v4/letter/r/e9a140/32.png) [@RonGros](https://discuss.elastic.co/u/RonGros)\
**Post date:** [April 2, 2019, 10:46am UTC](https://discuss.elastic.co/t/logstash-stopped-working-sincedb-is-not-updated-after-upgrade-from-6-2-4-6-4-0-update-6-5-doesnt-work-also/161335/61 "2019-04-02T10:46:40Z")

</div>

Oh, I missed your answer, just saw it now. will try!

---

<div class="post-metadata">

**Author:** ![RonGros](https://avatars.discourse-cdn.com/v4/letter/r/e9a140/32.png) [@RonGros](https://discuss.elastic.co/u/RonGros)\
**Post date:** [April 3, 2019, 7:49am UTC](https://discuss.elastic.co/t/logstash-stopped-working-sincedb-is-not-updated-after-upgrade-from-6-2-4-6-4-0-update-6-5-doesnt-work-also/161335/63 "2019-04-03T07:49:56Z")

</div>

Okay, I thought it didn't work but actually I forgot to update the files. I just updated the files and they were consumed (and deleted by the way...)

Now moving to my second stage - try to do that from a network drive.....

---

<div class="post-metadata">

**Author:** ![RonGros](https://avatars.discourse-cdn.com/v4/letter/r/e9a140/32.png) [@RonGros](https://discuss.elastic.co/u/RonGros)\
**Post date:** [April 3, 2019, 10:54am UTC](https://discuss.elastic.co/t/logstash-stopped-working-sincedb-is-not-updated-after-upgrade-from-6-2-4-6-4-0-update-6-5-doesnt-work-also/161335/64 "2019-04-03T10:54:31Z")

</div>

@guyboertje well, now that it seemed to be working I hit another wall... I didn't want the files to be deleted so I looked at the optional configurations and found out that the files are always deleted regardless of what I choose... why is that?

I will tell you what my current workflow is to explain:

- we collect logs from customers
- the logs then need to go through another process which analyzes them and creates a JSON file with the results of the analysis. these results are then being sent to the directory that is being monitored by logstash
- to make sure that we do not process the same log file again and again, the name of the analysis output file is predictable, and before running the analysis process we make sure that there is no such file yet, otherwise we might do work for nothing and have a lot of duplicates in ES, so I want to keep all these files in the directory.

This actually means that I can't use the read mode unless I somehow create a new process which duplicates these files - once for logstash to delete, and once for me to make sure if they existed...

---

<div class="post-metadata">

**Author:** ![guyboertje](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/guyboertje/32/31592_2.png) [@guyboertje](https://discuss.elastic.co/u/guyboertje)\
**Post date:** [April 3, 2019, 11:39am UTC](https://discuss.elastic.co/t/logstash-stopped-working-sincedb-is-not-updated-after-upgrade-from-6-2-4-6-4-0-update-6-5-doesnt-work-also/161335/65 "2019-04-03T11:39:00Z")

</div>

Look at the setting [`file_completed_action`](https://www.elastic.co/guide/en/logstash/current/plugins-inputs-file.html#plugins-inputs-file-file_completed_action)

You can set this to "log" and provide a path to a file that will contain the paths of the completed files with `file_completed_log_path` setting.

---

<div class="post-metadata">

**Author:** ![RonGros](https://avatars.discourse-cdn.com/v4/letter/r/e9a140/32.png) [@RonGros](https://discuss.elastic.co/u/RonGros)\
**Post date:** [April 4, 2019, 2:25pm UTC](https://discuss.elastic.co/t/logstash-stopped-working-sincedb-is-not-updated-after-upgrade-from-6-2-4-6-4-0-update-6-5-doesnt-work-also/161335/66 "2019-04-04T14:25:54Z")

</div>

> [@guyboertje](#):
>
> ou can set this to "log" and provide a path to a file that will contain the paths of the completed

Thanks, I saw that but I need the actual files not just the paths as I might run several things on the same file

---

<div class="post-metadata">

**Author:** ![guyboertje](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/guyboertje/32/31592_2.png) [@guyboertje](https://discuss.elastic.co/u/guyboertje)\
**Post date:** [April 9, 2019, 3:22pm UTC](https://discuss.elastic.co/t/logstash-stopped-working-sincedb-is-not-updated-after-upgrade-from-6-2-4-6-4-0-update-6-5-doesnt-work-also/161335/67 "2019-04-09T15:22:32Z")

</div>

The paths recorded in the "completed" file are full paths.

---

<div class="post-metadata">

**Author:** ![RonGros](https://avatars.discourse-cdn.com/v4/letter/r/e9a140/32.png) [@RonGros](https://discuss.elastic.co/u/RonGros)\
**Post date:** [April 15, 2019, 6:32am UTC](https://discuss.elastic.co/t/logstash-stopped-working-sincedb-is-not-updated-after-upgrade-from-6-2-4-6-4-0-update-6-5-doesnt-work-also/161335/68 "2019-04-15T06:32:12Z")

</div>

Correct, but I sometimes need the actual file more than once....

---

<div class="post-metadata">

**Author:** ![RonGros](https://avatars.discourse-cdn.com/v4/letter/r/e9a140/32.png) [@RonGros](https://discuss.elastic.co/u/RonGros)\
**Post date:** [April 15, 2019, 6:33am UTC](https://discuss.elastic.co/t/logstash-stopped-working-sincedb-is-not-updated-after-upgrade-from-6-2-4-6-4-0-update-6-5-doesnt-work-also/161335/69 "2019-04-15T06:33:31Z")

</div>

By the way, I just finished upgrade to version 7. unlike the other versions it wasn't an easy one at all... the upgrade assistance indeed helps you understand what will stop you from upgrading, but doesn't help you at all with the actual upgrade. unless you are very familiar elastic it isn't easy at all...

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 13, 2019, 6:33am UTC](https://discuss.elastic.co/t/logstash-stopped-working-sincedb-is-not-updated-after-upgrade-from-6-2-4-6-4-0-update-6-5-doesnt-work-also/161335/70 "2019-05-13T06:33:36Z")

</div>

Closed on May 13, 2019, 6:33am UTC

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.

[Previous page](https://discuss.elastic.co/t/logstash-stopped-working-sincedb-is-not-updated-after-upgrade-from-6-2-4-6-4-0-update-6-5-doesnt-work-also/161335.md?page=3)
