How to handle replay of eventhub data

I am currently running some disaster recovery tests on out logstash which uses the Azure Eventhub input plugin and elastic output. My test includes changing the URL to elastic so that sending will fail. However once I restore the url the eventhub plugin seems to have no idea that the elastic output has failed for some time. Now I would like to tell logstash to resend all messages on the eventhub which has not been sent. I have found the look-back option but that is only valid the first time logstash reads from eventhub so not much help for me. What would be the standard way to reply the last hour for example of messages on eventhub for logstash using my setup. Below is the eventhub input config:

      input {
        azure_event_hubs {
          event_hub_connections => ['${EVENT_HUB_CONNECTION}']
          threads => 2
          decorate_events => true
          consumer_group => "logstash-consumer-group"
          storage_connection => '${EVENT_HUB_STORAGE_CONNECTION}'
          storage_container => "logstashconsumersstate"

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.