# Wat is the isju reading files with no new line?

**URL:** <https://discuss.elastic.co/t/wat-is-the-isju-reading-files-with-no-new-line/111515>\
**Category:** Logstash\
**Created:** [December 13, 2017, 9:00am UTC](https://discuss.elastic.co/t/wat-is-the-isju-reading-files-with-no-new-line/111515 "2017-12-13T09:00:18Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![tellus83](https://avatars.discourse-cdn.com/v4/letter/t/ecccb3/32.png) [@tellus83](https://discuss.elastic.co/u/tellus83)\
**Post date:** [December 13, 2017, 9:00am UTC](https://discuss.elastic.co/t/wat-is-the-isju-reading-files-with-no-new-line/111515/1 "2017-12-13T09:00:18Z")

</div>

I have thousands of files with just one line per file. I read these files whit filebeat and send them to logstash. But i do not get any output. If I add a new line to a file I get output form logstash.

Where is the problem?  
And are there a workaround for this problem?

---

<div class="post-metadata">

**Author:** ![Kurt\_S](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kurt_s/32/17755_2.png) [@Kurt\_S](https://discuss.elastic.co/u/Kurt_S)\
**Post date:** [December 13, 2017, 11:06pm UTC](https://discuss.elastic.co/t/wat-is-the-isju-reading-files-with-no-new-line/111515/2 "2017-12-13T23:06:23Z")

</div>

Filebeat probably already sent the lines once, or the files are to old to be picked up. Either way, the quickest workaround in test is to rename the file and then copy (not rename) it to the original filename.

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [December 14, 2017, 7:09am UTC](https://discuss.elastic.co/t/wat-is-the-isju-reading-files-with-no-new-line/111515/3 "2017-12-14T07:09:23Z")

</div>

Do the files end with a newline character?

---

<div class="post-metadata">

**Author:** ![tellus83](https://avatars.discourse-cdn.com/v4/letter/t/ecccb3/32.png) [@tellus83](https://discuss.elastic.co/u/tellus83)\
**Post date:** [December 14, 2017, 7:50am UTC](https://discuss.elastic.co/t/wat-is-the-isju-reading-files-with-no-new-line/111515/4 "2017-12-14T07:50:41Z")

</div>

No. It is just one line in every file  
 ![Screenshot from 2017-12-14 08-48-52](https://us1.discourse-cdn.com/elastic/original/3X/3/c/3c4a5cc6e261eec5f6709a1b6a7623fa15e404a0.png)

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [December 14, 2017, 8:18am UTC](https://discuss.elastic.co/t/wat-is-the-isju-reading-files-with-no-new-line/111515/5 "2017-12-14T08:18:14Z")

</div>

Filebeat and Logstash are line-oriented. They won't send anything until they've seen a newline character.

---

<div class="post-metadata">

**Author:** ![tellus83](https://avatars.discourse-cdn.com/v4/letter/t/ecccb3/32.png) [@tellus83](https://discuss.elastic.co/u/tellus83)\
**Post date:** [December 14, 2017, 8:37am UTC](https://discuss.elastic.co/t/wat-is-the-isju-reading-files-with-no-new-line/111515/6 "2017-12-14T08:37:22Z")

</div>

Is there a tool like filebeat that can read this for me? I have thousands of files on thousands of computers I need to index.

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [December 14, 2017, 9:48am UTC](https://discuss.elastic.co/t/wat-is-the-isju-reading-files-with-no-new-line/111515/7 "2017-12-14T09:48:44Z")

</div>

Perhaps you can use an exec input plugin that runs "cat" or a custom script?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [January 11, 2018, 9:49am UTC](https://discuss.elastic.co/t/wat-is-the-isju-reading-files-with-no-new-line/111515/8 "2018-01-11T09:49:05Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
