My input file configuration is as follow:
input {
file {
path => "c:\temp\my-logstash.input"
type => "logs"
start_position => "end"
}
}
Yet, every time I add a row to the my-logstash.input file, the entire file is re-indexed (I redirect the output to Elasticsearch).
I checked the sincedb file under $LS_HOME\data\plugins\inputs\file and the byte count is correct.
What am i possibly doing wrong?
Thanks a lot!
-Ziv
Good point. That's exactly how I'm adding new rows at this point - using vim
I thought that the file name and the byte count are the only considerations. Hmmm...
Thanks for the tip Christian!
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.