Index documents daily from updated file

Elastic Stack Logstash
1

Hi there! I wanted to learn, how can I index documents daily from newer file

For example, I have file search_2017.07.27.log

input {
file {
path => ['/etc/logstash/elk_searchlogs/search_*']
start_position => "beginning"
type => "searchlog"
ignore_older => 0
}
}

I want The indexing to go the following way

  1. File is uploaded to my server with djenkins
  2. Then logstash takes this file and indexes it

Is it possible?

2

So a new file ends up in the elk_searchlogs directory each day and is named after the day's date? Sure, that'll work just fine and is a pretty standard use case.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.