Hi all,
there are 3 log files has been archived, and named 'archived.2016.06.12.log', 'archived.2016.06.13.log' and 'archived.2016.06.14.log'.
my logstash conf content
input {
file {
path => "/home/ubuntu/test_log/a*.log"
}
}
Logstash didn't do anything when I start logstash service, which start to crawler after I modify these files.
How to crawler these files after starting logstash service without modifying at beginning? (Archived files will be produced everyday)
Jason