# Parsing .db file in Logstash

**URL:** <https://discuss.elastic.co/t/parsing-db-file-in-logstash/52087>\
**Category:** Logstash\
**Created:** [June 7, 2016, 2:07pm UTC](https://discuss.elastic.co/t/parsing-db-file-in-logstash/52087 "2016-06-07T14:07:37Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![anonymus123](https://avatars.discourse-cdn.com/v4/letter/a/13edae/32.png) [@anonymus123](https://discuss.elastic.co/u/anonymus123)\
**Post date:** [June 7, 2016, 2:07pm UTC](https://discuss.elastic.co/t/parsing-db-file-in-logstash/52087/1 "2016-06-07T14:07:37Z")

</div>

Hello,  
Im looking for a way in which i can forward .db file to logstash and parse the events in this file.  
What is the best way for doing so?  
The logs are aggregated in one .db file on a windows workstation by some application which writes to this file.  
How is it possible to forward (maybe nxlog?) the events from this .db file to my logstash server?  
Thanks in advance !

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [June 7, 2016, 11:24pm UTC](https://discuss.elastic.co/t/parsing-db-file-in-logstash/52087/2 "2016-06-07T23:24:27Z")

</div>

What format is a .db file?

---

<div class="post-metadata">

**Author:** ![anonymus123](https://avatars.discourse-cdn.com/v4/letter/a/13edae/32.png) [@anonymus123](https://discuss.elastic.co/u/anonymus123)\
**Post date:** [June 8, 2016, 6:29am UTC](https://discuss.elastic.co/t/parsing-db-file-in-logstash/52087/3 "2016-06-08T06:29:18Z")

</div>

How can I check this?  
I know that the .db file is a sqllite 3 file.

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [June 8, 2016, 6:39am UTC](https://discuss.elastic.co/t/parsing-db-file-in-logstash/52087/4 "2016-06-08T06:39:25Z")

</div>

[https://www.elastic.co/guide/en/logstash/current/plugins-inputs-sqlite.html](https://www.elastic.co/guide/en/logstash/current/plugins-inputs-sqlite.html) may be useful then.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 4:54am UTC](https://discuss.elastic.co/t/parsing-db-file-in-logstash/52087/5 "2017-07-06T04:54:14Z")

</div>