# Where is my elasticsearch data?

**URL:** <https://discuss.elastic.co/t/where-is-my-elasticsearch-data/144277>\
**Category:** Elasticsearch\
**Created:** [August 14, 2018, 5:22am UTC](https://discuss.elastic.co/t/where-is-my-elasticsearch-data/144277 "2018-08-14T05:22:21Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![sheryl](https://avatars.discourse-cdn.com/v4/letter/s/ce7236/32.png) [@sheryl](https://discuss.elastic.co/u/sheryl)\
**Post date:** [August 14, 2018, 5:22am UTC](https://discuss.elastic.co/t/where-is-my-elasticsearch-data/144277/1 "2018-08-14T05:22:21Z")

</div>

i have csv file and using logstash i ingest this file to elasticsearch and viewing the count process on kibana .  
two things i want to know

1. where is the csv file i just ingested in elasticsearch in windows. i have checked the data folder of elasticsearch but its not there
2. in kibana i was showing the same number of count as that in csv file and later after some time i checked the count becomes twice . i didnt ingest the file again.

---

<div class="post-metadata">

**Author:** ![Silen\_logs](https://avatars.discourse-cdn.com/v4/letter/s/ed655f/32.png) [@Silen\_logs](https://discuss.elastic.co/u/Silen_logs)\
**Post date:** [August 14, 2018, 2:47pm UTC](https://discuss.elastic.co/t/where-is-my-elasticsearch-data/144277/2 "2018-08-14T14:47:49Z")

</div>

Can you show your logstash configuration file?

---

<div class="post-metadata">

**Author:** ![sheryl](https://avatars.discourse-cdn.com/v4/letter/s/ce7236/32.png) [@sheryl](https://discuss.elastic.co/u/sheryl)\
**Post date:** [August 16, 2018, 6:41am UTC](https://discuss.elastic.co/t/where-is-my-elasticsearch-data/144277/3 "2018-08-16T06:41:20Z")

</div>

input {  
file {  
path =\> "F:\Data\cars.csv"  
start\_position =\> "beginning"

```
     }
   }

```

filter {  
csv {  
separator =\> ","  
columns =\> ["car\_model","car\_name","manufacturer,"plant\_location"]  
}  
}

output {  
elasticsearch {  
hosts =\> "localhost:9200"  
index =\> "cars"  
document\_type =\> "car\_record"  
}  
stdout { }  
}

---

<div class="post-metadata">

**Author:** ![Silen\_logs](https://avatars.discourse-cdn.com/v4/letter/s/ed655f/32.png) [@Silen\_logs](https://discuss.elastic.co/u/Silen_logs)\
**Post date:** [August 30, 2018, 9:06pm UTC](https://discuss.elastic.co/t/where-is-my-elasticsearch-data/144277/4 "2018-08-30T21:06:54Z")

</div>

Hi sheryl,

Answring about the question number 2:

When you set the "start\_position" to "beginning" all the lines will be read each new line added to the file...not only the new lines...So a suggest that you change this to "end" so logstash will read only the new lines that will be appended in the file.... or you can also put an uuid/fingerprint filter to eliminate the duplicates.  
see the docs: [https://www.elastic.co/guide/en/logstash/6.x/plugins-filters-fingerprint.html](https://www.elastic.co/guide/en/logstash/6.x/plugins-filters-fingerprint.html)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [September 27, 2018, 9:06pm UTC](https://discuss.elastic.co/t/where-is-my-elasticsearch-data/144277/5 "2018-09-27T21:06:55Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.