Hello,
I have an application that feeds several log files, which I'm doing fine parsing at the moment.
Each day, at 7am, the log file (nameOfFile.log) gets zipped into nameOfFile.20180612.log.zip. These zip are kept for 30 days.
Here is my question, is it possible to tell logstash to look at the log file of today (that is fine atm) PLUS the zipped log files ? For information, the zip only contains one file, that is "nameOfFile.20180612.log".
This would especially be usefull if logstash gets down during night, the log file is not directly accessible when comes the morning, no matter the
I know about gzip_lines codec but read that .zip and .gzip are not compatible types, hence not usefull here.