# S3 connection with logstash file |||||I get a input from S3 bucket in my Logstash .conf files

**URL:** <https://discuss.elastic.co/t/s3-connection-with-logstash-file-i-get-a-input-from-s3-bucket-in-my-logstash-conf-files/297626>\
**Category:** Logstash\
**Tags:** elastic-stack-monitoring\
**Created:** [February 18, 2022, 4:33pm UTC](https://discuss.elastic.co/t/s3-connection-with-logstash-file-i-get-a-input-from-s3-bucket-in-my-logstash-conf-files/297626 "2022-02-18T16:33:09Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![d6036de2b54af16665f4](https://avatars.discourse-cdn.com/v4/letter/d/b487fb/32.png) [@d6036de2b54af16665f4](https://discuss.elastic.co/u/d6036de2b54af16665f4)\
**Post date:** [February 18, 2022, 4:33pm UTC](https://discuss.elastic.co/t/s3-connection-with-logstash-file-i-get-a-input-from-s3-bucket-in-my-logstash-conf-files/297626/1 "2022-02-18T16:33:09Z")

</div>

In one of .conf file i received No files found is s3 bucket . So is this is error of my connection with S3 bucket is wrong.

**How i can check this that is problem is their or not ?**

**var/log/logstash** Logs

[2022-02-18T16:26:42,478][INFO][logstash.inputs.s3] S3 input: No files found in bucket {:prefix=\>"production/devicestatus/pinpad/rbi\_"}  
[2022-02-18T16:26:45,614][INFO][logstash.inputs.s3] S3 input: No files found in bucket {:prefix=\>"production/devicestatus/pos-fp/rbi\_"}  
[2022-02-18T16:26:50,366][INFO][logstash.inputs.s3] S3 input: No files found in bucket {:prefix=\>"production/pos/qst"}  
[2022-02-18T16:26:57,966][INFO][logstash.inputs.s3] S3 input: No files found in bucket {:prefix=\>"production/pos\_daily/ls.s3"}  
[2022-02-18T16:26:59,419][INFO][logstash.inputs.s3] S3 input: No files found in bucket {:prefix=\>"VHQ"}  
[2022-02-18T16:27:00,669][INFO][logstash.inputs.s3] S3 input: No files found in bucket {:prefix=\>"production/pos/POSHealth\_TH\_AllStores"}  
[2022-02-18T16:27:12,491][INFO][logstash.inputs.s3] S3 input: No files found in bucket {:prefix=\>"production/devicestatus/pinpad/rbi\_"}

**.conf file**

input {  
s3 {  
bucket =\> "XYZ"

# access\_key\_id =\> "${ACCESS}"

# secret\_access\_key =\> "${SECRET}"

```
interval => 7200

```

# sincedb\_path =\> "/dev/null"

```
include_object_properties => true
delete => true
prefix => "production/pos_daily/ls.s3"
add_field => { "vendor" => "SICOM"}

```

}  
}

---

<div class="post-metadata">

**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Post date:** [February 18, 2022, 4:39pm UTC](https://discuss.elastic.co/t/s3-connection-with-logstash-file-i-get-a-input-from-s3-bucket-in-my-logstash-conf-files/297626/2 "2022-02-18T16:39:22Z")

</div>

This message means that there are no files in the specified bucket.

Your connection with S3 is working, just there are no files in the specified path.

If it was a connection error you would get an `ERROR` log, not an `INFO` log.

Also, you have other configs running, right?

The input you shared has the following prefix:

```auto
prefix => "production/pos_daily/ls.s3"

```

This will make logstash look for the fils that start with that prefix, but your log is showing that logstash is looking for files with other prefix, this means that you have other configs running.

---

<div class="post-metadata">

**Author:** ![d6036de2b54af16665f4](https://avatars.discourse-cdn.com/v4/letter/d/b487fb/32.png) [@d6036de2b54af16665f4](https://discuss.elastic.co/u/d6036de2b54af16665f4)\
**Post date:** [February 18, 2022, 4:45pm UTC](https://discuss.elastic.co/t/s3-connection-with-logstash-file-i-get-a-input-from-s3-bucket-in-my-logstash-conf-files/297626/3 "2022-02-18T16:45:55Z")

</div>

Ok Leand ,

I checked in the s3 bucket and there are no file present now .

Thanks for response.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 18, 2022, 4:46pm UTC](https://discuss.elastic.co/t/s3-connection-with-logstash-file-i-get-a-input-from-s3-bucket-in-my-logstash-conf-files/297626/4 "2022-03-18T16:46:44Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.