Elasticsearch data indices is not creating when start_position = beginning in logstash input file plugin?

Elastic Stack Logstash
1

input {
file {
path => "/home/logs/info.log"
type => "accesslog"
start_position => "beginning"
sincedb_path => "/dev/null"
stat_interval => 5
ignore_older => 0
}

2

input {
file {
path => "/home/logs/info.log"
type => "accesslog"
start_position => "beginning"
sincedb_path => "/dev/null"
stat_interval => 5
ignore_older => 0
}

any update

3

Can you comment the line and try again:
# ignore_older => 0

ignore_older

  • Value type is [number] or [string_duration]
  • There is no default value for this setting.

When the file input discovers a file that was last modified before the specified duration (seconds if a number is specified), the file is ignored. After it’s discovery, if an ignored file is modified it is no longer ignored and any new data is read. By default, this option is disabled. Note this unit is in seconds.
If read is specified, these settings can be used:

  • ignore_older (older files are not processed)

Have you add debug in output and log.level=debug in logstash.yml?

output {
  stdout {codec => rubydebug  }
}
4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.