I had troubles with parsing of logs with logstash during startup
Once I add an exta line to log file -> parsed;
It seems that parsing only is triggerred once change is observer
- Is there a setting for the input? I've seen http polling, but is there somehting as polling time for a file not http request?
- I do have number of folders , each folder contains 2 files . Is that possible to parse folder by folder and concatenate fields from these 2 files into a signe json?
Folder o_1: obs.out, log.out
Folder o_2: obs.out, log.out
Json formed from timestamp from obs.out and all messages from log.out
So this will be a JSON with "timestamp" :