# What exactly does sincedb\_path do?

**URL:** <https://discuss.elastic.co/t/what-exactly-does-sincedb-path-do/292504>\
**Category:** Logstash\
**Created:** [December 20, 2021, 8:00pm UTC](https://discuss.elastic.co/t/what-exactly-does-sincedb-path-do/292504 "2021-12-20T20:00:22Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![kibanauser4](https://avatars.discourse-cdn.com/v4/letter/k/ecd19e/32.png) [@kibanauser4](https://discuss.elastic.co/u/kibanauser4)\
**Post date:** [December 20, 2021, 8:00pm UTC](https://discuss.elastic.co/t/what-exactly-does-sincedb-path-do/292504/1 "2021-12-20T20:00:22Z")

</div>

I'm having little trouble understanding Logstash a bit. I've already imported a file using Logstash and I've tried to update the index but it updates it only if I set sincedb\_path to NUL. Can someone explain? Thanks.

---

<div class="post-metadata">

**Author:** ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)\
**Post date:** [December 20, 2021, 8:09pm UTC](https://discuss.elastic.co/t/what-exactly-does-sincedb-path-do/292504/2 "2021-12-20T20:09:50Z")

</div>

The sincedb is an in-memory database that records which files logstash has read and how much of each file it has read, so that if data is appended to the file logstash knows to consume it.

sincedb\_path is used to persist the in-memory database across restarts. That means that if you set sincedb\_path to NUL (on Windows, or /dev/null on UNIX) then when logstash is restarted it thinks every file is new and will re-read it.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [January 17, 2022, 8:10pm UTC](https://discuss.elastic.co/t/what-exactly-does-sincedb-path-do/292504/3 "2022-01-17T20:10:19Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
