I am thinking to use logstash, but I have a question that how log stash come to know about the latest entries in log file ?
The file's modification time is checked (by default every second).
ok , but what about content of file ? @magnusbaeck please can u explain the behavior of logstash with respect to log files etc ?
If the file's modification time has changed Logstash will attempt to read from it. It reads until it hits the end of the file.
Is there any particular reason your asking these questions? We might be able to save some time if we address the root issue right away.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.