Csv file is being deleted after process

I have a config which reads csv files.
csv file gets to it's location via rcp from another system once a day.
but that csv file gets deleted as soon it process reading it. I don't want that to be deleted. how do I do that.

input {
        file {
              path => "/data01/csv_files/usage_report*.log"
              sincedb_path => "/dev/null"
              start_position => "beginning"
              mode => "read"
        }
    }

csv files are usage_report_01.log, usage_report_02.log, for day of the week.

I think "file_complete_action" is the parameter you are looking for. read on here: https://www.elastic.co/guide/en/logstash/current/plugins-inputs-file.html#plugins-inputs-file-file_completed_action
As "delete" is the default here, you should try to another value for "file_complete_action".

Thanks Christopher. That is exactly what I was looking for

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.