Getting log INFO File is inactive: /logs/analytics/xyz6.log. Closing because close_inactive of 5m0s reached

Elastic Stack Beats
1

Getting log INFO File is inactive: /logs/analytics/xyz6.log. Closing because close_inactive of 5m0s reached.
Data is not reaching to logstash.

output {
if [type] =~ "syslog" {
elasticsearch {
hosts => ["http://127.0.0.1:9200"]
index => "%{[@metadata][beat]}-%{+YYYY.MM.dd}"
document_type => "%{[@metadata][type]}"
}
}
else if [type] =~ "analytics" {
elasticsearch {
hosts => ["http://127.0.0.1:9200"]
index => "analytics-%{+YYYY.MM.dd}"
document_type => "%{[@metadata][type]}"
}
}
}

filebeat.yml--
filebeat.prospectors:

  • input_type: log
    paths:

    • /var/log/syslog
      document_type: syslog

  • input_type: log
    paths:

    • /logs/analytics/*.log
      document_type: analytics

output.logstash:
hosts: ["0.0.0.0:5044"]
loadbalance: true
bulk_max_size: 2048

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.