title: Using milestone 2 input plugin 'file'?
body: <p>I am reading a log file using Logstash. Here are the Files:</p>
  
  <p>Config File:</p>
  
  <pre><code>input { 
  file{
      path =&gt; "/home/cdot/Desktop/auth_log"
      start_position =&gt; beginning
  }
  }
  
  filter{
  grok{
  
  match =&gt; ["message", "%{TIMESTAMP_ISO8601: timestamp} %{HOSTNAME: server-name} %{WORD: action}: %{WORD: machine}(%{GREEDYDATA: command}):%{GREEDYDATA:logline}"]
  }
  }
  
  output {
      elasticsearch { host =&gt; localhost }
      stdout { codec =&gt; rubydebug }
  }
  </code></pre>
  
  <p>Output:</p>
  
  <pre><code>Using milestone 2 input plugin 'file'. This plugin should be stable, but if you see strange behavior, please let us know! For more information on plugin milestones, see http://logstash.net/docs/1.4.1/plugin-milestones {:level=&gt;:warn}
  </code></pre>
  
  <p>I am not getting any output.
  My log file has lines in the form of:</p>
  
  <pre><code>2014-05-09T04:02:08+05:30 bx920as1 runuser: pam_unix(runuser-l:session): session opened for user cyrus by (uid=0)
  2014-05-26T04:02:09+05:30 bx920as1 runuser: pam_unix(runuser-l:session): session closed for user cyrus
  </code></pre>
  
  <p>Plz help.</p>
  
  <p><strong>EDIT:</strong></p>
  
  <p>After adding lines</p>
  
  <pre><code>start_position =&gt; beginning
      sincedb_path =&gt; "/dev/null"
  </code></pre>
  
  <p>to input I get the following output:</p>
  
  <pre><code>{
         "message" =&gt; "2014-05-26T04:02:09+05:30 bx920as1 runuser: pam_unix(runuser-l:session): session opened for user cyrus by (uid=0)",
        "@version" =&gt; "1",
      "@timestamp" =&gt; "2014-05-27T03:59:26.773Z",
            "host" =&gt; "cdot-HP-Pro-3330-MT",
            "path" =&gt; "/home/cdot/Desktop/auth_log",
         "logline" =&gt; " session opened for user cyrus by (uid=0)"
  }
  {
         "message" =&gt; "2014-05-26T04:02:09+05:30 bx920as1 runuser: pam_unix(runuser-l:session): session closed for user cyrus",
        "@version" =&gt; "1",
      "@timestamp" =&gt; "2014-05-27T03:59:26.774Z",
            "host" =&gt; "cdot-HP-Pro-3330-MT",
            "path" =&gt; "/home/cdot/Desktop/auth_log",
         "logline" =&gt; " session closed for user cyrus"
  }
  {
         "message" =&gt; "",
        "@version" =&gt; "1",
      "@timestamp" =&gt; "2014-05-27T03:59:26.774Z",
            "host" =&gt; "cdot-HP-Pro-3330-MT",
            "path" =&gt; "/home/cdot/Desktop/auth_log",
            "tags" =&gt; [
          [0] "_grokparsefailure"
      ]
  }
  </code></pre>
  
  <p>Thus only the <strong>logline</strong> is getting captured and rest fields are not getting matched. Any idea?</p>