Is it possible to read yesterday's log data like its real-time?

Elastic Stack Logstash
1

I am reading input from a .txt file that is 24 hours old, is there any way to have it read in as live data rather than read in all at once? Basically trying to mimic real-time data with yesterday's data. I am running logstash outputted to elasticsearch then displayed in kibana (all versions 5.6.2).

Thank you!

2

Have you looked at the throttle filter for logstash ? It won't give a synthetic reproduction of live data being ingested, but it will allow you to stagger the volume and frequency of the data as it travels across your workflow.

1 Like
3

I just applied it, it works, Good info, wish there was something that could mimic live feed though. Thanks for the help!

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.