# "type" : "index\_not\_found\_exception" **URL:** \ **Category:** Logstash\ **Created:** [January 30, 2018, 8:42am UTC](https://discuss.elastic.co/t/type-index-not-found-exception/117582 "2018-01-30T08:42:50Z")\ **Posts on this page:** 10\ **Page:** 1
**Author:** ![Vigneshprasanna](https://avatars.discourse-cdn.com/v4/letter/v/a3d4f5/32.png) [@Vigneshprasanna](https://discuss.elastic.co/u/Vigneshprasanna)\ **Post date:** [January 30, 2018, 8:42am UTC](https://discuss.elastic.co/t/type-index-not-found-exception/117582/1 "2018-01-30T08:42:50Z")
Hi, In this I'm trying to test ELK using a jboss log file placed in a folder I'm done with both ES and kibana. the logstash part I'm not able to configer i have placed the below routine inside a .conf file of config folder. i get "type" : "index\_not\_found\_exception" exception. can you please guide me about the .conf file pipeline settings and how to start logstash (I tried starting the logstash by running the bat file inside the bin dir ) 1.downloaded logstash 2.unziped 3.created the below conf file inside the config folder Please let me know is there any more changes i have to go through Note : Windows machine ES 6.1 input { file { path =\> "D:/Personal/Test\_log\_files" type =\> "file" } filter { grok { match =\> [ "message", "%{TIME:time} %{LOGLEVEL:level} [(?[^]]+)] ((?[^)]+)) %{GREEDYDATA:message}" ] overwrite =\> ["message"] } date { match =\> ["time", "MMM dd YYYY HH:mm:ss,SSS"] remove\_field =\> ["time"] } } output { elasticsearch { hosts =\> ["localhost:9200"] } # stdout { codec =\> json } } } ---
**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\ **Post date:** [January 30, 2018, 9:39am UTC](https://discuss.elastic.co/t/type-index-not-found-exception/117582/2 "2018-01-30T09:39:50Z")
Please show the full error message. ---
**Author:** ![Vigneshprasanna](https://avatars.discourse-cdn.com/v4/letter/v/a3d4f5/32.png) [@Vigneshprasanna](https://discuss.elastic.co/u/Vigneshprasanna)\ **Post date:** [January 30, 2018, 9:58am UTC](https://discuss.elastic.co/t/type-index-not-found-exception/117582/3 "2018-01-30T09:58:58Z")
{ "error" : { "root\_cause" : [ { "type" : "index\_not\_found\_exception", "reason" : "no such index", "resource.type" : "index\_or\_alias", "[resource.id](http://resource.id)" : "logstash-$DATE", "index\_uuid" : "_na_", "index" : "logstash-$DATE" } ], "type" : "index\_not\_found\_exception", "reason" : "no such index", "resource.type" : "index\_or\_alias", "[resource.id](http://resource.id)" : "logstash-$DATE", "index\_uuid" : "_na_", "index" : "logstash-$DATE" }, "status" : 404 } This is the error when i try to access "[http://localhost:9200/logstash-$DATE/\_search?pretty&q=geoip.city\_name=Buffalo](http://localhost:9200/logstash-%24DATE/_search?pretty&q=geoip.city_name=Buffalo)" ---
**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\ **Post date:** [January 30, 2018, 10:32am UTC](https://discuss.elastic.co/t/type-index-not-found-exception/117582/5 "2018-01-30T10:32:44Z")
Oh, you're getting that from a curl request. That was impossible to tell from your question. As configured your file input tails the input file. Look into the `start_position` option to get it to start from the top and learn about sincedb. See the file input documentation. ---
**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\ **Post date:** [January 30, 2018, 10:32am UTC](https://discuss.elastic.co/t/type-index-not-found-exception/117582/6 "2018-01-30T10:32:57Z")
> Can you please guide me is this the correct format of .conf file and correct groke pattems for the following log Check out the grok constructor web site. ---
**Author:** ![Vigneshprasanna](https://avatars.discourse-cdn.com/v4/letter/v/a3d4f5/32.png) [@Vigneshprasanna](https://discuss.elastic.co/u/Vigneshprasanna)\ **Post date:** [January 30, 2018, 11:14am UTC](https://discuss.elastic.co/t/type-index-not-found-exception/117582/7 "2018-01-30T11:14:22Z")
Logstash started how do i know its pushing the data to elastic search ?? still im not able to c the data in kibana .. ☹ please guide me ---
**Author:** ![Vigneshprasanna](https://avatars.discourse-cdn.com/v4/letter/v/a3d4f5/32.png) [@Vigneshprasanna](https://discuss.elastic.co/u/Vigneshprasanna)\ **Post date:** [January 30, 2018, 11:46am UTC](https://discuss.elastic.co/t/type-index-not-found-exception/117582/8 "2018-01-30T11:46:50Z")
Now i get an Error saying "Failed to open process token Access is Denied \<5\>" ---
**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\ **Post date:** [January 30, 2018, 12:26pm UTC](https://discuss.elastic.co/t/type-index-not-found-exception/117582/9 "2018-01-30T12:26:18Z")
> Logstash started how do i know its pushing the data to Elasticsearch ?? Temporarily replace your elasticsearch output with a `stdout { codec => rubydebug }` output and use it to verify that Logstash is reading and processing any events at all. ---
**Author:** ![Vigneshprasanna](https://avatars.discourse-cdn.com/v4/letter/v/a3d4f5/32.png) [@Vigneshprasanna](https://discuss.elastic.co/u/Vigneshprasanna)\ **Post date:** [January 31, 2018, 5:27am UTC](https://discuss.elastic.co/t/type-index-not-found-exception/117582/10 "2018-01-31T05:27:28Z")
> [@magnusbaeck](#): > > start\_position Can you please give me a example so i can understand more clearly Thanks for you great support Magnusbaeck 🙂 ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [February 28, 2018, 5:27am UTC](https://discuss.elastic.co/t/type-index-not-found-exception/117582/11 "2018-02-28T05:27:30Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.