# Old logs needs to be indexed

**URL:** <https://discuss.elastic.co/t/old-logs-needs-to-be-indexed/91511>\
**Category:** Logstash\
**Created:** [July 1, 2017, 11:10am UTC](https://discuss.elastic.co/t/old-logs-needs-to-be-indexed/91511 "2017-07-01T11:10:05Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![vu\_test](https://avatars.discourse-cdn.com/v4/letter/v/5fc32e/32.png) [@vu\_test](https://discuss.elastic.co/u/vu_test)\
**Post date:** [July 1, 2017, 11:10am UTC](https://discuss.elastic.co/t/old-logs-needs-to-be-indexed/91511/1 "2017-07-01T11:10:05Z")

</div>

Hi All, new to ELK environment, I have some old logs (a month old) I want to index it. When on running logstash with OUTPUT as {stdout =\> rubydebug} ..gets the result. But doing the same enabling elasticsearch {} doesn't fetch any result. Not sure what could be the reason, suspecting something to do with @timestamp. Please advise me on the same or some guide/tutor for the same. Thanks in advance.

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [July 3, 2017, 8:07pm UTC](https://discuss.elastic.co/t/old-logs-needs-to-be-indexed/91511/2 "2017-07-03T20:07:40Z")

</div>

Logstash remembers how far files have been processed so the second time you run Logstash it won't reprocess the files. To disable this behavior and parse files from the top set the file input's `sincedb_path` option to "/dev/null" (unless you're on Windows) or "nul" (if you're on Windows) and set `start_position => "beginning"`.

---

<div class="post-metadata">

**Author:** ![vu\_test](https://avatars.discourse-cdn.com/v4/letter/v/5fc32e/32.png) [@vu\_test](https://discuss.elastic.co/u/vu_test)\
**Post date:** [July 6, 2017, 5:51am UTC](https://discuss.elastic.co/t/old-logs-needs-to-be-indexed/91511/3 "2017-07-06T05:51:55Z")

</div>

Thanks for prompt reply Magnus.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 3, 2017, 5:52am UTC](https://discuss.elastic.co/t/old-logs-needs-to-be-indexed/91511/4 "2017-08-03T05:52:18Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.