File_completed_action delete not working for gzip files

Elastic Stack Logstash
1

When I read .gz log files, the files are not being deleted after being read. When I use an uncompressed file it seems to delete correctly.

  • logstash-input-file (4.1.11)

  • logstash-7.4.2

    input {
    file {
    path => "/CS_dump/logstash-pickup/part-*.gz"
    sincedb_path => "NUL"
    codec => json
    mode => "read"
    file_completed_action => "delete"
    }
    }

I can create and delete files in the folder so I don't see how it could be a permission issue. I don't see any errors in the logs related to a failed delete attempt.

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.