I have a strange error that I cant figure out.
I am using logstash 7.3.2 and have a simple config.
Input is a json log file I am creating manually (just testing right now)
Output is to elsasticsearch.
When my test file has only a few records, it loads fine. But as I add more, it stops loading the first records and seems to pick up only the later ones. So, in the json below, if I remove the last few lines, it loads fine. But then add some lines and it only loads the last four lines as if the first five lines dont exist. There are no errors in the output or log.
Has anyone seen this behavior?
{"bus":"sft","ds":"pos","freq":"mon","busdsfreq":"sftposmon","cpu_seconds":815}
{"bus":"tec","ds":"pos","freq":"mon","busdsfreq":"tecposmon","cpu_seconds":200}
{"bus":"sft","ds":"pos","freq":"mon","busdsfreq":"sftposmon","cpu_seconds":257}
{"bus":"xyz","ds":"pos","freq":"wks","busdsfreq":"xyzposwks","cpu_seconds":665}
{"bus":"xyz","ds":"pos","freq":"wks","busdsfreq":"xyzposwks","cpu_seconds":557}
{"bus":"xyz","ds":"pos","freq":"wks","busdsfreq":"xyzposwks","cpu_seconds":446}
{"bus":"xyz","ds":"pos","freq":"wks","busdsfreq":"xyzposwks","cpu_seconds":776}
{"bus":"sft","ds":"pos","freq":"mon","busdsfreq":"sftposmon","cpu_seconds":990}
{"bus":"tec","ds":"pos","freq":"mon","busdsfreq":"tecposmon","cpu_seconds":656}