logstash-file

Logstash File input: sincedb_path

时间秒杀一切 提交于 2019-12-01 04:35:31
问题 Upon restarting Logstash, at times observed that Logstash duplicates the log events. Was wondering as to what would be the right way to apply start_position , sincedb_path , sincedb_write_interval configuration options. What happens when there are multiple files in the same location as in my example below /home/tom/testData/*.log What happens when the file rotation occurs like for example the XXX.log file is renamed to XXX-<date>.log and a new XXX.log file is created. In this case name doesn