Input File plugin permissions

Elastic Stack Logstash
1

Hi Guys,

Hope you can help.
I have configured Logstash Input File plugin to read the files and send further.

  1. Application is creating the file logs.log in /home/user/logs.log with permissions: -rw-r-----
  2. Logstash is able to read the file only if I change file logs.log permission to execute: -rwxr-xr-x.

Why logstash requires execute the files?
And how to make proper way for logstash to read those files, were all the time new logs.log files are created?

2

I think it is more likely that logstash requires the files to be world-readable rather than executable. That would suggest that logstash is being run by a user that is not in the same group that the files are owned by.

1 Like
3

Thanks it works!

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.