Logstash 6.5.0-1 throwing OPEN_WARN_INTERVAL warning

Elastic Stack Logstash
1

Hi,
Currently I'm seeing some servers are shows this following wARN in logstash 6.5.0-1

Preformatted text[WARN ][filewatch.tailmode.handlers.createinitial] open_file OPEN_WARN_INTERVAL is '300'Preformatted text

Would be great if anyone knows how to fix this.

Thanks in advance...

2

You must be tailing more than 4095 files.

You need to set close_older to a shorter time to give files 4096+ a chance to be opened and read.

Are you really tailing or trying to read static files?

3

Thanks for prompt response.

We use

file {
path => ['/var/log/app/api.log']
}

How does it opens up those other files? Where do I need to specify that close_older value?

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.