I am trying to configure logstash to support logrotate.
I am only giving the path of the log file being truncated after each logrotate.
So whenever a new file is generated after copying(by logrotate), I am assuming logstash will figure out about the new file and start processing it aswell, from the file offset it left from in the main file.
Am I correct?
Is there something I am missing here?