# WARNING: Could not find logstash.yml

**URL:** https://discuss.elastic.co/t/warning-could-not-find-logstash-yml/71219
**Category:** Logstash
**Created:** [January 11, 2017, 1:18pm UTC](https://discuss.elastic.co/t/warning-could-not-find-logstash-yml/71219 "2017-01-11T13:18:49Z")
**Posts on this page:** 1
**Showing post:** 2

<div class="post-metadata">

### Author: ![nick.e](https://avatars.discourse-cdn.com/v4/letter/n/8dc957/32.png) [@nick.e](https://discuss.elastic.co/u/nick.e)
#### Post date: [January 11, 2017, 1:39pm UTC](https://discuss.elastic.co/t/warning-could-not-find-logstash-yml/71219/2 "2017-01-11T13:39:09Z")

</div>

> [@Beuhlet\_Reseau](#):
>
> \*\*WARNING: Could not find logstash.yml which is typically located in $LS\_HOME/config or /etc/logstash. You can specify the path using --path.settings. Continuing using the defaults

It's because Logstash usually looks for the file in your $LS\_HOME/config directory. You can either start logstash with the flag `--path.setting /etc/logstash` or create a symlink. (see [https://discuss.elastic.co/t/logstash-configuration-of-5-0-1/68883](https://discuss.elastic.co/t/logstash-configuration-of-5-0-1/68883))

> [@Beuhlet\_Reseau](#):
>
> 14:00:36.538 [LogStash::Runner] INFO logstash.agent - No config files found in path {:path=\>"/usr/share/logstash/bin/logstash-syslog.conf"}

You passed `logstash-syslog.conf` to the `-f` parameter. -f expects a full path.

Your complete command-line statement for logstash should be:  
`./logstash -f /etc/logstash/conf.d/logstash-syslog.conf --path.setting /etc/logstash`

---

_[View the full topic](https://discuss.elastic.co/t/warning-could-not-find-logstash-yml/71219)._