Logstash 5.x to 7.x - Gzip Files

Elastic Stack Logstash
1

Hi,

is there a change in file input for logstash 7.x? I struggle about an issue with reading gzip files. in my old version 5.x i could give like:

input {
file {
path => "/var/log/packetfilter.*"
}
}

And it reads all files including gzip files.

In 7.x i get errors about charset:

"Received an event that has a different character encoding than you configured"

I solved it with:

input {
file {
path => "/var/log/packetfilter."
exclude => ".gz"
codec => plain { charset => "ASCII" }
}
}

So far no more errors but sadly not reading gzip.

I found it nice to be able to read gzip as well if i need to. How can i archive the old way and read gzip as well on a demand?

Thanks and Regards,

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.