Hi,
I'm using logstash file input in windows which locks the folder the file resides in.
I've configured 'stat_interval => 60' so it wouldn't sample the file every second but the folder is still being locked.
Is there any way to overcome this? Do I must use a different input method than file?
Adding my conf:
input {
file{
path => ["C:\Program Files\Apache Software Foundation\Tomcat 7.0\logs\portal.log","C:\Program Files\Apache Software Foundation\Tomcat 7.0\logs\tenant.log"]
start_position => beginning
stat_interval => 60
codec => multiline {
pattern => "^\s"
what => "previous"
}
}
}
filter {
grok {
match => {"message" => "%{TIMESTAMP_ISO8601:logdate} [%{DATA:thread}] (%{DATA:classname}) %{LOGLEVEL:level} - %{GREEDYDATA:log_message}"}
}
}
output {
kafka {
broker_list => "XXX:9092"
topic_id => "bo_portal"
client_id => "boalb004s-01"
}
}
Thanks,
Amir