Hi guys, I am a newbie in logstash. I am trying to forward all my log files to elasticsearch using logstash. The problem is, the previously existing log files are huge and I do not need them. Is there a way to only input the newly generated log files?
To make it clear, I did tried to set the start_position => "end", and sincedb_path => "/dev/null". It did not work. Hope you guys can help me figure it out.
Thanks in advance.