# /var/log/logstash-plain.log is filling the disk space **URL:** \ **Category:** Logstash\ **Created:** [May 24, 2018, 10:09am UTC](https://discuss.elastic.co/t/var-log-logstash-plain-log-is-filling-the-disk-space/133112 "2018-05-24T10:09:25Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![venki522](https://avatars.discourse-cdn.com/v4/letter/v/90db22/32.png) [@venki522](https://discuss.elastic.co/u/venki522)\ **Post date:** [May 24, 2018, 10:09am UTC](https://discuss.elastic.co/t/var-log-logstash-plain-log-is-filling-the-disk-space/133112/1 "2018-05-24T10:09:25Z")
Hello all, I am using logstash for netflow collection and iam running logstash 6.2.During the process of collection the /var/log/logstash-plain.log is filling my disk space.Once the disk space is full the netflow collection stops.I have to clean my disk space and stop/start logstash to start collecting the data I tried to change the path.logs to another directory where i have space but it is not logging.I did give the full permissions to directory thought it could be permissions related but no luck Can someone help me how to make logstash log to another drive where i have disk space how to do a logrotation for logstash any help is much appreciated ---
**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\ **Post date:** [May 24, 2018, 11:05am UTC](https://discuss.elastic.co/t/var-log-logstash-plain-log-is-filling-the-disk-space/133112/2 "2018-05-24T11:05:49Z")
> how to make logstash log to another drive where i have disk space You're on the right track with `path.logs`. Exactly how did you change that setting? What are the permissions of that directory? > how to do a logrotation for logstash If you install Logstash via the RPM or Debian package this'll get set up for you. ---
**Author:** ![venki522](https://avatars.discourse-cdn.com/v4/letter/v/90db22/32.png) [@venki522](https://discuss.elastic.co/u/venki522)\ **Post date:** [May 24, 2018, 12:50pm UTC](https://discuss.elastic.co/t/var-log-logstash-plain-log-is-filling-the-disk-space/133112/3 "2018-05-24T12:50:38Z")
The setting was changed in the logstash.yml Path.logs: /data/LS-Logs Permissions for the /data/LS-Logs is changed via chmod 777 /data/LS-Logs ---
**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\ **Post date:** [May 24, 2018, 1:59pm UTC](https://discuss.elastic.co/t/var-log-logstash-plain-log-is-filling-the-disk-space/133112/4 "2018-05-24T13:59:24Z")
`path.logs` or `Path.logs`? How do you know your logstash.yml file is being read at all? ---
**Author:** ![venki522](https://avatars.discourse-cdn.com/v4/letter/v/90db22/32.png) [@venki522](https://discuss.elastic.co/u/venki522)\ **Post date:** [May 24, 2018, 2:22pm UTC](https://discuss.elastic.co/t/var-log-logstash-plain-log-is-filling-the-disk-space/133112/5 "2018-05-24T14:22:05Z")
it is path.logs How to check if my yaml file is read or not..I observed one thing is the logging stopped once I removed /var/log/logstash..I believe yaml is read...let me know if my understanding is wrong ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [June 21, 2018, 2:22pm UTC](https://discuss.elastic.co/t/var-log-logstash-plain-log-is-filling-the-disk-space/133112/6 "2018-06-21T14:22:09Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.