Hi!
I have stuck with logfile initialization in Windows using Logstash. I want
to make logstash read localhost_access_log, but seems that Logstash can't
understand (or maybe I am somewhere wrong) my path that I try to pass in
config-file.
input section contains this:
file {
codec => multiline {
pattern => "^\s"
what => "previous"
}
discover_interval => 15 # number (optional), default: 15
path => ["c:\apache\logs\foolog.log"] # array (required)
start_position => "end" # string, one of ["beginning", "end"]
(optional), default: "end"
stat_interval => 1 # number (optional), default: 1
tags => "foo-mon" # string (optional)
type => "fooobar"
}
and contents of c:\apache\logs\foolog.log logfile appear in elastic.
But with C:\Apache\logs\localhost_access_log.2014-06-16.txt there is a
problem - Logstash doesn't want to read this file.
Configuration is like this (we also tried to add codec as above):
file {
discover_interval => 5 # number (optional), default: 15
#exclude => ... # array (optional)
path => ["c:\apache\logs\localhost_access_log.*.txt"] # array (required)
start_position => "end" # string, one of ["beginning", "end"]
(optional), default: "end"
stat_interval => 1 # number (optional), default: 1
tags => "foo-mon" # string (optional)
type => "access"
}
Please, can someone help?
What we also tried:
if I rename localhost_access_log.2014-06-16.txt to localhost_access_log.txt
(I also changed name in config), started logstash and changed contents of
localhost_access_log.txt - it finds file and writes to elastic.
Renamed to localhost_access_log.2014.txt and used wildcard
localhost_access_log.*.txt - not working, so this is not a minus character.
C:\logstash\lib\logstash\version.rb says
LOGSTASH_VERSION = "1.4.1"
Someone have any ideas why wildcard is not working?
Thanks
--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/8391119b-b30d-49f2-8133-1b46e4cc721c%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.