# Please please Please help me in logstash
**URL:** https://discuss.elastic.co/t/please-please-please-help-me-in-logstash/95419
**Category:** Logstash
**Created:** [August 1, 2017, 9:18pm UTC](https://discuss.elastic.co/t/please-please-please-help-me-in-logstash/95419 "2017-08-01T21:18:03Z")
**Posts on this page:** 3
**Page:** 1
### Author:  [@P\_Kumar](https://discuss.elastic.co/u/P_Kumar)
#### Post date: [August 1, 2017, 9:18pm UTC](https://discuss.elastic.co/t/please-please-please-help-me-in-logstash/95419/1 "2017-08-01T21:18:03Z")
Hi ,
I am new to ELK , i am trying to read the logs for IBM dmgr ,node and Application logs . but it is reading top 2 file input and creating index but 3rd file is not creating index and not reading could you please help me .
Below is my logstash config file .
input {
file {
path =\> [“/opt/WebSphere/AppServer8.5.5/profiles/x.x.x.xManager/logs/dmgr/SystemOut.log”]
start\_position =\> "beginning"
type =\> “websphere1”
# important! logstash read only logs from files touched the last 24 hours
# 8640000 = 100 days
ignore\_older =\> "8640000"
codec =\> multiline {
pattern =\> "^\s"
what =\> “previous”
}
}
file {
path =\> [“/opt/WebSphere/AppServer8.5.5/profiles/x.x.x.x/logs/nodeagent/SystemOut.log”]
start\_position =\> "beginning"
type =\> “app1”
# 8640000 = 100 days
ignore\_older =\> "8640000"
codec =\> multiline {
pattern =\> "^\s"
what =\> “previous”
}
}
file {
path =\> [“/opt/WebSphere/AppServer8.5.5/profiles/x.x.x.x/logs/ActiveVOS-v01/SystemOut.log”]
start\_position =\> "beginning"
type =\> “websphere”
# 8640000 = 100 days
ignore\_older =\> "86400"
codec =\> multiline {
pattern =\> "^\s"
what =\> “previous”
}
}
}
output {
if [type] == “websphere1” {
elasticsearch{
hosts =\> [“x.x.x.x:9200”]
index =\> “x.x.x.x\_dmgr1\_%{+YYYY.MM.dd}”
}
}
if [type] == “app1” {
elasticsearch{
hosts =\> [“x.x.x.x:9200”]
index =\> “x.x.x.x\_node\_%{+YYYY.MM.dd}”
}
} else if [type] == “websphere” {
elasticsearch{
hosts =\> [“x.x.x.x:9200”]
index =\> “x.x.x.x\_ActiveVOS-v01\_%{+YYYY.MM.dd}”
}
} else {
stdout{
codec =\> rubydebug
}
}
}
---
### Author:  [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [August 2, 2017, 6:37pm UTC](https://discuss.elastic.co/t/please-please-please-help-me-in-logstash/95419/2 "2017-08-02T18:37:45Z")
This is a duplicate of [Logstash not reading more than 2 files](https://discuss.elastic.co/t/logstash-not-reading-more-than-2-files/95269). Please don't open multiple threads for the same issue.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [August 30, 2017, 6:37pm UTC](https://discuss.elastic.co/t/please-please-please-help-me-in-logstash/95419/3 "2017-08-30T18:37:49Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.