# Running logstash in docker container - but apache logs don't get indexed

**URL:** <https://discuss.elastic.co/t/running-logstash-in-docker-container-but-apache-logs-dont-get-indexed/65846>\
**Category:** Logstash\
**Created:** [November 11, 2016, 8:40pm UTC](https://discuss.elastic.co/t/running-logstash-in-docker-container-but-apache-logs-dont-get-indexed/65846 "2016-11-11T20:40:30Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![linuxdev](https://avatars.discourse-cdn.com/v4/letter/l/a88e57/32.png) [@linuxdev](https://discuss.elastic.co/u/linuxdev)\
**Post date:** [November 11, 2016, 8:40pm UTC](https://discuss.elastic.co/t/running-logstash-in-docker-container-but-apache-logs-dont-get-indexed/65846/1 "2016-11-11T20:40:30Z")

</div>

Hi. Im running logstash in docker container - but apache logs don't get indexed

Here's how I launch logstash in docker:

```auto
docker run -d \
    -v /srv/logstash/config:/config-dir \
    -v /var/log/:/var/log \
    --name logstash \
    logstash logstash -f /config-dir/mw.conf

```

Here's my config file:

```auto
input {
  file {
    type => "apache-access"
    path => "/var/log/apache2/mwol_v3-access.log"
    start_position => "beginning" 
  }
}
filter {
  if [path] =~ "access" {
    mutate { replace => { "type" => "apache_access" } }
    grok {
      match => { "message" => "%{COMBINEDAPACHELOG}" }
    }
  }
  date {
    match => ["timestamp" , "dd/MMM/yyyy:HH:mm:ss Z"]
  }
}
output {
  stdout { codec => rubydebug }
  elasticsearch {
    hosts => ["example.com:2108"]
  }
}

```

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [November 12, 2016, 6:16pm UTC](https://discuss.elastic.co/t/running-logstash-in-docker-container-but-apache-logs-dont-get-indexed/65846/2 "2016-11-12T18:16:26Z")

</div>

If the input file is older than 24 hours you may have to adjust the file input's `ignore_older` option. Otherwise, bump Logstash's log level and inspect its logs. Look for entries containing "mwol\_v3-access.log".

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 10, 2016, 6:16pm UTC](https://discuss.elastic.co/t/running-logstash-in-docker-container-but-apache-logs-dont-get-indexed/65846/3 "2016-12-10T18:16:30Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.