# Reparse log file with Filebeat-Logstash

**URL:** https://discuss.elastic.co/t/reparse-log-file-with-filebeat-logstash/74085
**Category:** Logstash
**Created:** [February 6, 2017, 3:45pm UTC](https://discuss.elastic.co/t/reparse-log-file-with-filebeat-logstash/74085 "2017-02-06T15:45:09Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![Beuhlet\_Reseau](https://avatars.discourse-cdn.com/v4/letter/b/e95f7d/32.png) [@Beuhlet\_Reseau](https://discuss.elastic.co/u/Beuhlet_Reseau)
#### Post date: [February 6, 2017, 3:45pm UTC](https://discuss.elastic.co/t/reparse-log-file-with-filebeat-logstash/74085/1 "2017-02-06T15:45:09Z")

</div>

Hello,

I have seems few topics about my request but any performs...

So, i have all ELK 5.1 installed + Filebeat to send log to Logstash.

I have tested :

In logstash's conf :  
Start\_position =\> "beginning" (Invalid configuration at retstart)  
Ignore\_older =\> 0 (Invalid configuration at restart)  
Exemple :

```
input {
  beats {
         port => 5044
        ssl => true
        ssl_certificate => "/etc/ssl/logstash-forwarder.crt"
        ssl_key => "/etc/ssl/logstash-forwarder.key"
        Start_position => "beginning" 
        }
      }

```

Delete sincedb (Not perform and it wasn't recreate)  
Delete All index in Elasticsearch (Ok but they is any effect).

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [March 6, 2017, 3:45pm UTC](https://discuss.elastic.co/t/reparse-log-file-with-filebeat-logstash/74085/2 "2017-03-06T15:45:25Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.