# Readfile - buffer\_extract error: a delimiter can't be found

**URL:** <https://discuss.elastic.co/t/readfile-buffer-extract-error-a-delimiter-cant-be-found/253709>\
**Category:** Logstash\
**Created:** [October 29, 2020, 2:18pm UTC](https://discuss.elastic.co/t/readfile-buffer-extract-error-a-delimiter-cant-be-found/253709 "2020-10-29T14:18:05Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![eddy](https://avatars.discourse-cdn.com/v4/letter/e/57b2e6/32.png) [@eddy](https://discuss.elastic.co/u/eddy)\
**Post date:** [October 29, 2020, 2:18pm UTC](https://discuss.elastic.co/t/readfile-buffer-extract-error-a-delimiter-cant-be-found/253709/1 "2020-10-29T14:18:05Z")

</div>

Hi everyone,

I'm currently dealing with an error in logstash. Sometimes when I launch Logstash , It doesn't process some data and this error appears :

`[INFO] 2020-10-25 13:48:52.328 [[main]<file] readfile - buffer_extract: a delimiter can't be found in current chunk, maybe there are no more delimiters or the delimiter is incorrect or the text before the delimiter, a 'line', is very large, if this message is logged often try increasing the `file_chunk_size` setting. {"delimiter"=>"\n", "read_position"=>72000000, "bytes_read_count"=>2123, "last_known_file_size"=>72002123, "file_path"=>"/tmp/folder_data/file-1"}`

I'm using the file input plugin with this configuration :

```
input 
{
	file 
	{
		path => ["/tmp/folder_data/*"]
		start_position => "beginning"
		sincedb_path => "/dev/null"
		file_chunk_size => 8000000
		mode => "read"
		close_older => "3 hour"
		file_completed_action => "log_and_delete"
		file_completed_log_path => "/tmp/file_logstash.log"
	}
}

```

I try to increase the size of the file\_chunck\_size but the error still happen. I already read those :

- [Delimiter error](https://discuss.elastic.co/t/delimiter-error-when-using-logstash-file-input-plugin-files-not-ingested-fully/160683)
- [Logstash 6.2.4 read\_to\_eof: no delimiter found in current chunk](https://discuss.elastic.co/t/logstash-6-2-4-read-to-eof-no-delimiter-found-in-current-chunk/130613)

Unfortunately there is sometimes no answer or the error is not the same...

If you have a solution or a way to avoid this error, it will really help me.

Thanks.  
Eddy

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 26, 2020, 2:18pm UTC](https://discuss.elastic.co/t/readfile-buffer-extract-error-a-delimiter-cant-be-found/253709/2 "2020-11-26T14:18:24Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.