How can I config about reverse log

Elastic Stack Beats
1

I have this kind of log:

|2018/6/8|15:49:37|D|
|2018/5/8|14:49:37|C|
|2018/3/30|13:33:32|B|
|2018/3/28|12:26:08|A|

when a new msgline is added, this new msgline will add at start of logfile. Like this:

|2018/7/8|16:49:37|E|
|2018/6/8|15:49:37|D|
|2018/5/8|14:49:37|C|
|2018/3/30|13:33:32|B|
|2018/3/28|12:26:08|A|

How can I config this type of log in filebeat?

At first, I find 'tail_files' option. But it just start at end of file, and read down.

2

This use case is not supported by Filebeat. May I ask what application writes log lines like this?

3

how about logstash?

actully, i dont know...it's an industrial device,we just have log....:sob:

at last,only write it by myself...:upside_down_face:

in other way, i think it is not too difficult to achieve this case...
just modify offset to "eof - recorded offset "...

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.