# Upload log file in elasticsearch using logstash

**URL:** <https://discuss.elastic.co/t/upload-log-file-in-elasticsearch-using-logstash/163736>\
**Category:** Logstash\
**Created:** [January 10, 2019, 12:48pm UTC](https://discuss.elastic.co/t/upload-log-file-in-elasticsearch-using-logstash/163736 "2019-01-10T12:48:59Z")\
**Posts on this page:** 12\
**Page:** 1

<div class="post-metadata">

**Author:** ![Bhavesh\_Padharia](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/bhavesh_padharia/32/39565_2.png) [@Bhavesh\_Padharia](https://discuss.elastic.co/u/Bhavesh_Padharia)\
**Post date:** [January 10, 2019, 12:48pm UTC](https://discuss.elastic.co/t/upload-log-file-in-elasticsearch-using-logstash/163736/1 "2019-01-10T12:48:59Z")

</div>

Hello Everyone ,  
i am new in elasticsearch

I try to upload log file in elasticsearch using logstash  
i use this curl command

```
system@system-VirtualBox:~/Downloads/logstash-6.5.4$ curl -s -XPOST localhost:9200/_bulk --data @/home/system/Documents/LOG Data File/app2.log

```

But it seen this error

```
{"error":{"root_cause":[{"type":"parse_exception","reason":"request body is required"}],"type":"parse_exception","reason":"request body is required"},"status":400}

```

what i do to solve this error? Anyone suggest me.

---

<div class="post-metadata">

**Author:** ![A\_B](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/a_b/32/17104_2.png) [@A\_B](https://discuss.elastic.co/u/A_B)\
**Post date:** [January 10, 2019, 1:01pm UTC](https://discuss.elastic.co/t/upload-log-file-in-elasticsearch-using-logstash/163736/2 "2019-01-10T13:01:06Z")

</div>

Well, you are not really using Logstash. You are in a Logstash folder using `curl` trying to post a log file directly to Elasticsearch.

I suggest you actually run Logstash 😉

There are plenty of examples of simple Logstash configs to accomplish this.

---

<div class="post-metadata">

**Author:** ![A\_B](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/a_b/32/17104_2.png) [@A\_B](https://discuss.elastic.co/u/A_B)\
**Post date:** [January 10, 2019, 1:08pm UTC](https://discuss.elastic.co/t/upload-log-file-in-elasticsearch-using-logstash/163736/3 "2019-01-10T13:08:26Z")

</div>

Thah was not necessarily very helpful, sorry... Try this (I don't really use file inputs so it might not be 100% correct). Put the below in a file e.g. logstash.conf

```
input {
  file {
    path => "/home/system/Documents/LOG Data File/app2.log"
    start_position => "beginning"
  }

}

filter {}

output {
  elasticsearch {
    hosts => "["127.0.0.1:9200"]"
  }
}

```

Start Logstash with

```auto
logstash-6.5.4/bin/logstash -f logstash.conf

```

---

<div class="post-metadata">

**Author:** ![Bhavesh\_Padharia](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/bhavesh_padharia/32/39565_2.png) [@Bhavesh\_Padharia](https://discuss.elastic.co/u/Bhavesh_Padharia)\
**Post date:** [January 11, 2019, 8:42am UTC](https://discuss.elastic.co/t/upload-log-file-in-elasticsearch-using-logstash/163736/4 "2019-01-11T08:42:17Z")

</div>

```
{"error":{"root_cause":[{"type":"parse_exception","reason":"request body is required"}],"type":"parse_exception","reason":"request body is required"},"status":400}

```

it again seen this error.

---

<div class="post-metadata">

**Author:** ![A\_B](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/a_b/32/17104_2.png) [@A\_B](https://discuss.elastic.co/u/A_B)\
**Post date:** [January 11, 2019, 9:16am UTC](https://discuss.elastic.co/t/upload-log-file-in-elasticsearch-using-logstash/163736/5 "2019-01-11T09:16:15Z")

</div>

That still looks like a `curl` error message to me... What command did you run?

---

<div class="post-metadata">

**Author:** ![Bhavesh\_Padharia](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/bhavesh_padharia/32/39565_2.png) [@Bhavesh\_Padharia](https://discuss.elastic.co/u/Bhavesh_Padharia)\
**Post date:** [January 11, 2019, 9:17am UTC](https://discuss.elastic.co/t/upload-log-file-in-elasticsearch-using-logstash/163736/6 "2019-01-11T09:17:44Z")

</div>

```
curl -s -XPOST localhost:9200/_bulk --data @/home/system/Documents/LOG Data File/app2.log
```

---

<div class="post-metadata">

**Author:** ![A\_B](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/a_b/32/17104_2.png) [@A\_B](https://discuss.elastic.co/u/A_B)\
**Post date:** [January 11, 2019, 9:47am UTC](https://discuss.elastic.co/t/upload-log-file-in-elasticsearch-using-logstash/163736/7 "2019-01-11T09:47:19Z")

</div>

You are still not using Logstash.

At least in the subject you say you want to use Logstash.

If you take my suggested Logstash configuration from above and start Logstash with

```auto
logstash-6.5.4/bin/logstash -f logstash.conf

```

That is all that is needed. You do not need to manually run `curl` commands after that. Logstash will read the log file and send the data to Elasticsearch.

---

<div class="post-metadata">

**Author:** ![Bhavesh\_Padharia](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/bhavesh_padharia/32/39565_2.png) [@Bhavesh\_Padharia](https://discuss.elastic.co/u/Bhavesh_Padharia)\
**Post date:** [January 11, 2019, 10:04am UTC](https://discuss.elastic.co/t/upload-log-file-in-elasticsearch-using-logstash/163736/8 "2019-01-11T10:04:55Z")

</div>

![log](https://us1.discourse-cdn.com/elastic/original/3X/e/2/e2ee066212bd99fe3cd47fa1786df87706c4b9f6.png)

My logstash successfully started but i can't upload log file using curl command.

---

<div class="post-metadata">

**Author:** ![Bhavesh\_Padharia](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/bhavesh_padharia/32/39565_2.png) [@Bhavesh\_Padharia](https://discuss.elastic.co/u/Bhavesh_Padharia)\
**Post date:** [January 11, 2019, 10:06am UTC](https://discuss.elastic.co/t/upload-log-file-in-elasticsearch-using-logstash/163736/9 "2019-01-11T10:06:28Z")

</div>

please help how to upload log file in elasticsearch using logstash or any other source to upload log file.

---

<div class="post-metadata">

**Author:** ![A\_B](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/a_b/32/17104_2.png) [@A\_B](https://discuss.elastic.co/u/A_B)\
**Post date:** [January 11, 2019, 10:13am UTC](https://discuss.elastic.co/t/upload-log-file-in-elasticsearch-using-logstash/163736/10 "2019-01-11T10:13:38Z")

</div>

You have to set the path to the Logstash config file correctly.

Put this in a file e.g. /path/to/config/logstash.conf

```auto
input {
  file {
    path => "/home/system/Documents/LOG Data File/app2.log"
    start_position => "beginning"
  }

}

filter {}

output {
  elasticsearch {
    hosts => "["127.0.0.1:9200"]"
  }
}

```

Start Logstash with

```auto
logstash-6.5.4/bin/logstash -f /path/to/config/logstash.conf

```

---

<div class="post-metadata">

**Author:** ![Bhavesh\_Padharia](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/bhavesh_padharia/32/39565_2.png) [@Bhavesh\_Padharia](https://discuss.elastic.co/u/Bhavesh_Padharia)\
**Post date:** [January 11, 2019, 10:54am UTC](https://discuss.elastic.co/t/upload-log-file-in-elasticsearch-using-logstash/163736/11 "2019-01-11T10:54:07Z")

</div>

Thank you. it's work now,

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [February 8, 2019, 10:54am UTC](https://discuss.elastic.co/t/upload-log-file-in-elasticsearch-using-logstash/163736/12 "2019-02-08T10:54:09Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.