The ls command returns empty message.
input { exec { command => "ls -l path/to/a/specific/file" interval => 30 } }
filter :
grok { match => { "message" => "^%{DATA:permission}\s+%{NUMBER:links_nb}\s+%{DATA:owner_name}\s+%{DATA:owner_group}\s+%{NUMBER:filesize_o}.*" } }
output :
file { codec => rubydebug }
Tested with :
•Plugin version: v3.1.4
•Plugin version: v3.3.2