# WHY two times run the same day log file count is different

**URL:** <https://discuss.elastic.co/t/why-two-times-run-the-same-day-log-file-count-is-different/84341>\
**Category:** Elasticsearch\
**Created:** [May 3, 2017, 3:37am UTC](https://discuss.elastic.co/t/why-two-times-run-the-same-day-log-file-count-is-different/84341 "2017-05-03T03:37:15Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Champion\_Xie](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/champion_xie/32/71770_2.png) [@Champion\_Xie](https://discuss.elastic.co/u/Champion_Xie)\
**Post date:** [May 3, 2017, 3:37am UTC](https://discuss.elastic.co/t/why-two-times-run-the-same-day-log-file-count-is-different/84341/1 "2017-05-03T03:37:15Z")

</div>

when current time 2017.05.02 yesterday log file count 16G

when i run bellow command line  
delete /logstash-nginx-2017.05.01  
repeat run the yesterday log file count 25G No duplicate data，Why the total number of results for normal operation analysis is much less

 ![](https://us1.discourse-cdn.com/elastic/original/3X/f/3/f3da8ee808bc70c425415ea2fc8cc355d53f78b0.png)

---

<div class="post-metadata">

**Author:** ![Champion\_Xie](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/champion_xie/32/71770_2.png) [@Champion\_Xie](https://discuss.elastic.co/u/Champion_Xie)\
**Post date:** [May 3, 2017, 4:02am UTC](https://discuss.elastic.co/t/why-two-times-run-the-same-day-log-file-count-is-different/84341/2 "2017-05-03T04:02:24Z")

</div>

example  
why no data pre 8 hours of one day ?  
logfile datetime UTC +08：00

my logstash config file

 ![](https://us1.discourse-cdn.com/elastic/original/3X/3/6/362bec1dc0c584e5b09de11309a567972268e2bb.png)

 ![](https://us1.discourse-cdn.com/elastic/original/3X/8/7/87259fd1b67bce12b67b7316bb3a20b9de4a085f.png)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 31, 2017, 4:04am UTC](https://discuss.elastic.co/t/why-two-times-run-the-same-day-log-file-count-is-different/84341/3 "2017-05-31T04:04:58Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.