FileBeat Not Shipping changes as expected to Logstash


(Raghu Ram) #1

I have an original html file
first it shipped using file beat and log stash file opened successfully with all content

Changed existing lines in html file , file beat detected those changes and shipped to log stash
observed that file opened successfully but with not expected content
observed in logstash server logs that incorrect data was shipped from file beats

Refer attached screen shots
initial html without new element


logstashmessage

Following is my filebeat prospectors and log stash conf
filebeat.prospectors:
type: log
paths:
directory/*.html
output.logstash:
hosts: ["ipaddress"]
input {
beats {
port => 5048
}
}
output {
stdout { codec => rubydebug }
file
{
codec => line {
format => "%{[message]}"
}
path => "C:/Program Files/logstash-6.2.3/testPractice/LogsCollected/DebugLog09May2018/OneTwo.html}
}


(system) #2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.