# Stuck in Logstash

**URL:** <https://discuss.elastic.co/t/stuck-in-logstash/269704>\
**Category:** Logstash\
**Created:** [April 9, 2021, 12:14pm UTC](https://discuss.elastic.co/t/stuck-in-logstash/269704 "2021-04-09T12:14:13Z")\
**Posts on this page:** 17\
**Page:** 1

<div class="post-metadata">

**Author:** ![padamrai](https://avatars.discourse-cdn.com/v4/letter/p/3da27b/32.png) [@padamrai](https://discuss.elastic.co/u/padamrai)\
**Post date:** [April 9, 2021, 12:14pm UTC](https://discuss.elastic.co/t/stuck-in-logstash/269704/1 "2021-04-09T12:14:13Z")

</div>

Whenever I am running file, it is stuck even I tried different file but still stuck.

 ![stuck](https://us1.discourse-cdn.com/elastic/original/3X/c/f/cf94c74fd8a734bc3fe9523e998c11a13c6831b3.png)

---

<div class="post-metadata">

**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Post date:** [April 9, 2021, 1:10pm UTC](https://discuss.elastic.co/t/stuck-in-logstash/269704/2 "2021-04-09T13:10:57Z")

</div>

It is not stuck, it is running, the line `Successfully started Logstash API endpoint` means that logstash is up and running.

What is your pipeline configuration, what you are trying to do and what is the expected result?

---

<div class="post-metadata">

**Author:** ![padamrai](https://avatars.discourse-cdn.com/v4/letter/p/3da27b/32.png) [@padamrai](https://discuss.elastic.co/u/padamrai)\
**Post date:** [April 9, 2021, 1:22pm UTC](https://discuss.elastic.co/t/stuck-in-logstash/269704/3 "2021-04-09T13:22:10Z")

</div>

It should shows the values that have inside my file.

---

<div class="post-metadata">

**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\
**Post date:** [April 9, 2021, 1:39pm UTC](https://discuss.elastic.co/t/stuck-in-logstash/269704/4 "2021-04-09T13:39:23Z")

</div>

Share your conf file in formatted text.

Most likely it already read the file, which it will only do once....ever unless you clean up the sincedb or set the sincedb path to "NUL" for windows.

`sincedb_path => "NUL"`

Or it can't find a file to read.

---

<div class="post-metadata">

**Author:** ![padamrai](https://avatars.discourse-cdn.com/v4/letter/p/3da27b/32.png) [@padamrai](https://discuss.elastic.co/u/padamrai)\
**Post date:** [April 9, 2021, 2:30pm UTC](https://discuss.elastic.co/t/stuck-in-logstash/269704/5 "2021-04-09T14:30:00Z")

</div>

It should show this output. I already defined sincedb\_path null in config file.

 ![extracted_data.png](https://us1.discourse-cdn.com/elastic/original/3X/1/3/13a9561dc7d55e5906197782233bcc80ac6859b0.png)

---

<div class="post-metadata">

**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Post date:** [April 9, 2021, 2:46pm UTC](https://discuss.elastic.co/t/stuck-in-logstash/269704/6 "2021-04-09T14:46:42Z")

</div>

You need to share your config using the formatted text option (the `<\>` button), without seeing your pipeline config there is no way to understand what you are trying to do and what the problem is.

---

<div class="post-metadata">

**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\
**Post date:** [April 9, 2021, 2:52pm UTC](https://discuss.elastic.co/t/stuck-in-logstash/269704/7 "2021-04-09T14:52:03Z")

</div>

Yes please show your config.

BTW it is not `null` on windows it is very specifically `"NUL"` 1 L

Exactly as I showed it, caps everything.

---

<div class="post-metadata">

**Author:** ![padamrai](https://avatars.discourse-cdn.com/v4/letter/p/3da27b/32.png) [@padamrai](https://discuss.elastic.co/u/padamrai)\
**Post date:** [April 9, 2021, 3:16pm UTC](https://discuss.elastic.co/t/stuck-in-logstash/269704/8 "2021-04-09T15:16:43Z")

</div>

Here is my config file;  
sincedb\_path =\> "NULL", I have used always but not get any error message.

input{  
file{

path =\> "C:/Users/Ubaid/Desktop/SampleNBP.csv"  
start\_position =\> "beginning"  
sincedb\_path =\> "NULL"  
}  
}

filter{  
csv{  
separator =\> ","  
columns =\> ["Date","Mobile","Telco","Msg","ShortCode","SMSLength","DeliveryDate","DeliveryStatus","Criteria"]  
}  
}

output{  
elasticsearch {  
hosts =\> "[http://localhost:9200](http://localhost:9200)"  
index =\> "sampledata"  
}  
}

---

<div class="post-metadata">

**Author:** ![padamrai](https://avatars.discourse-cdn.com/v4/letter/p/3da27b/32.png) [@padamrai](https://discuss.elastic.co/u/padamrai)\
**Post date:** [April 9, 2021, 3:17pm UTC](https://discuss.elastic.co/t/stuck-in-logstash/269704/9 "2021-04-09T15:17:37Z")

</div>

I have also tried codec=\> rubydebug

---

<div class="post-metadata">

**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\
**Post date:** [April 9, 2021, 3:21pm UTC](https://discuss.elastic.co/t/stuck-in-logstash/269704/10 "2021-04-09T15:21:29Z")

</div>

I'm not sure why you're not getting an error it's just not working for you so I'm unclear why you would not try the actual correct syntax.

What I provided is the correct syntax . NUL not NULL

If you fix that and then it still doesn't work we'll look at some other items

---

<div class="post-metadata">

**Author:** ![padamrai](https://avatars.discourse-cdn.com/v4/letter/p/3da27b/32.png) [@padamrai](https://discuss.elastic.co/u/padamrai)\
**Post date:** [April 9, 2021, 3:36pm UTC](https://discuss.elastic.co/t/stuck-in-logstash/269704/11 "2021-04-09T15:36:18Z")

</div>

I am working since two months and always using NULL not NUL.

---

<div class="post-metadata">

**Author:** ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)\
**Post date:** [April 9, 2021, 3:42pm UTC](https://discuss.elastic.co/t/stuck-in-logstash/269704/12 "2021-04-09T15:42:55Z")

</div>

> [@padamrai](#):
>
> I am working since two months and always using NULL not NUL.

Great, so you have been persisting the in-memory sincedb to a file called NULL across restarts. When logstash starts it reads the file called NULL (probably from the current-working-directory) and populates the sincedb. If you write it to a file called NUL instead then the writes are discarded and the in-memory sincedb starts off empty.

If you use NULL you will not get an error, logstash will work with it just fine. It just will not do what you want.

---

<div class="post-metadata">

**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\
**Post date:** [April 9, 2021, 3:45pm UTC](https://discuss.elastic.co/t/stuck-in-logstash/269704/13 "2021-04-09T15:45:12Z")

</div>

Thanks @Badger I was thinking that ^ was the case but didn't have a windows to test on. Now I have that in my tool / answer chest!

---

<div class="post-metadata">

**Author:** ![padamrai](https://avatars.discourse-cdn.com/v4/letter/p/3da27b/32.png) [@padamrai](https://discuss.elastic.co/u/padamrai)\
**Post date:** [April 9, 2021, 3:49pm UTC](https://discuss.elastic.co/t/stuck-in-logstash/269704/14 "2021-04-09T15:49:16Z")

</div>

Sir I updated the file with NUL but Still not getting anything on the console.  
it is stuck there successfully started logstash API endpoint:

---

<div class="post-metadata">

**Author:** ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)\
**Post date:** [April 9, 2021, 4:35pm UTC](https://discuss.elastic.co/t/stuck-in-logstash/269704/15 "2021-04-09T16:35:24Z")

</div>

Enable `--log.level trace`. Direct the logs to a file, because there will be a lot of them. Once logstash has logged the "Successfully started Logstash API" message, wait 60 seconds. Then search the logfile for messages from the filewatch module. See [here](https://discuss.elastic.co/t/logstash-wildcards-regex-not-working/164204/2) for an example. If you cannot understand the logs, post the messages from filewatch (not everything) either here, if possible, or on [gist.github.com](http://gist.github.com) or another file sharing site.

---

<div class="post-metadata">

**Author:** ![padamrai](https://avatars.discourse-cdn.com/v4/letter/p/3da27b/32.png) [@padamrai](https://discuss.elastic.co/u/padamrai)\
**Post date:** [April 9, 2021, 4:43pm UTC](https://discuss.elastic.co/t/stuck-in-logstash/269704/16 "2021-04-09T16:43:54Z")

</div>

Thank you so much Dear @Badger for your patience. I will follow your steps.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 7, 2021, 4:44pm UTC](https://discuss.elastic.co/t/stuck-in-logstash/269704/17 "2021-05-07T16:44:47Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
