I am building a EL as a service for a specific set of users. The logs that I parse are often not real time logs and I would like to stop the logstash agent as soon as all of the logs are parsed.
How do I achieve the stopping of the logstash once the agent has parsed the entire log uploaded by the user.
I did find one blog which did this, but was not really to make sense of it. So posting this question here.