Auto_flush_interval in exec module

Elastic Stack Logstash
1

Hi,

I have a problem with auto_flush_interval

I want to check the command result

logstash.conf:

input {                                                                                                                                                
  exec {                                                                                                                                               
       command => "lmstat -a -c"                                                                       
       interval => "60"                                                                                                                
       codec => multiline {                                                                                                                            
             pattern => "^Users of .*"                                                                                                                 
             negate => true                                                                                                                            
             what => "previous"                                                                                                                        
             auto_flush_interval => "1"                                                                                                                
       }                                                                                                                                               
  }                                                                                                                                                    
}                                                                                                                                                      
                                                                                                                                                       
filter {                                                                                                                                               
}                                                                                                                                                      
                                                                                                                                                       
output {                                                                                                                                               
  stdout { codec => rubydebug }                                                                                                                        
}

The command result is:

Users of LicenseSoftware_01: (Total of 50 licenses issued; Total of 2 licenses in use)                                                                    
  "LicenseSoftware" v1.0, vendor: VendorName, expiry: 31-dec-2021                                                                                      
                                                                                                                                                       
Users of LicenseSoftware_02: (Total of 50 licenses issued; Total of 4 licenses in use)                                                                    
  "LicenseSoftware" v1.0, vendor: VendorName, expiry: 31-dec-2021

With this conf, the last line is not flush after 1 second (auto_flush_interval delay), but after 60 seconds (interval delay).

Does the auto_flush_interval works correctly with the exec module ?
How do I flush, the interval value is about on day in real life ?

2

Does someone use auto_flush_interval with exec module ?

Thank you for your answers, it can help me a lot

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.