I have my ES cluster in 3 nodes(i.e.Each node in each VM) , i had enabled the slowlogs in all the node and keep slowlogs in the PATH:
/var/es/slowlogs.log . So , what i had did is i writtten a logstash script to parse the logs that are taking > 15ms .
I need to run the logstash script in cron job in such a way it will give all the logs to me at prescribed time. For that i had installed logstash in NODE1 and kept the input path as
path => "/var/es/slowlogs.log"
start_position => "beginning"
What i want is, How can i get all the slowlogs that are present in all the VM's at one shot than running the same script in all the VM's(i.e.In a node 1 if i run the script it will get the parsed data from all the three nodes some thing like this
path => "/var/es/all node logs.log" SO that i will get the all parsed data from all the logs in all VM's
Is this possible in logstash ?