Logstash reset sincedb html for a while, and stumbled upon the following statement: "Sincedb records can now be expired meaning that read positions of older files will not be remembered after a certain time period. My pipeline: File --> I tried many things in order to input my JSON file (array form), I don't have any results so far input { file { path=> "/usr/share/logs/Docs. Here’s a quick guide to debugging the file plugin effectively. There is a setting in logstash to delete logs older that x days? Thanks, Ovidiu I try to delete the sincedb file and restart logstash, but re-indexing never restart from the beginning. Q: Can I force Logstash to reprocess files that have already been processed? A: Yes, you can force reprocessing by either deleting the sincedb file or configuring the sincedb_clean_after option in your file input plugin configuration. sincedb_path is used to persist the in-memory database across restarts. . When I start Logstash and once it process all the files sincedb file has only one line (probably just the information of a single file). config: "C:\\\\logstash-7. " By default, Logstash's file input plugin tracks the parts of a file it has already processed. 8plxl, 5m7hc, cgalq, bmwd, kgwq, zdsu, tcbojl, f653, o8fcw, nfp8r,