# Where does logstash store the json file it sends to elasticsearch or does it?

**URL:** <https://discuss.elastic.co/t/where-does-logstash-store-the-json-file-it-sends-to-elasticsearch-or-does-it/183757>\
**Category:** Logstash\
**Created:** [May 31, 2019, 3:33pm UTC](https://discuss.elastic.co/t/where-does-logstash-store-the-json-file-it-sends-to-elasticsearch-or-does-it/183757 "2019-05-31T15:33:42Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![decodeit](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/decodeit/32/46023_2.png) [@decodeit](https://discuss.elastic.co/u/decodeit)\
**Post date:** [May 31, 2019, 3:33pm UTC](https://discuss.elastic.co/t/where-does-logstash-store-the-json-file-it-sends-to-elasticsearch-or-does-it/183757/1 "2019-05-31T15:33:42Z")

</div>

I am sending a json from the REST API to logstash using http\_poller and it stores in elasticsearch.  
Does logstash stores this json?  
I am using docker-compose to run the containers,  
Thanks

---

<div class="post-metadata">

**Author:** ![pastechecker](https://avatars.discourse-cdn.com/v4/letter/p/0ea827/32.png) [@pastechecker](https://discuss.elastic.co/u/pastechecker)\
**Post date:** [May 31, 2019, 3:36pm UTC](https://discuss.elastic.co/t/where-does-logstash-store-the-json-file-it-sends-to-elasticsearch-or-does-it/183757/2 "2019-05-31T15:36:37Z")

</div>

The events are being buffered in your heap memory assuming that you are using the default queue (which is memory).

If you want to store it on the disk you can use the persisted queue.

More info: [https://www.elastic.co/guide/en/logstash/current/logstash-settings-file.html](https://www.elastic.co/guide/en/logstash/current/logstash-settings-file.html)

---

<div class="post-metadata">

**Author:** ![decodeit](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/decodeit/32/46023_2.png) [@decodeit](https://discuss.elastic.co/u/decodeit)\
**Post date:** [May 31, 2019, 3:42pm UTC](https://discuss.elastic.co/t/where-does-logstash-store-the-json-file-it-sends-to-elasticsearch-or-does-it/183757/3 "2019-05-31T15:42:09Z")

</div>

does that mean by default, once its stored in elasticsearch(once logstash outputs), it looses it.

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [May 31, 2019, 4:16pm UTC](https://discuss.elastic.co/t/where-does-logstash-store-the-json-file-it-sends-to-elasticsearch-or-does-it/183757/4 "2019-05-31T16:16:44Z")

</div>

Yes.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 28, 2019, 4:22pm UTC](https://discuss.elastic.co/t/where-does-logstash-store-the-json-file-it-sends-to-elasticsearch-or-does-it/183757/5 "2019-06-28T16:22:09Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.