Logstash 6.5.3 inode reuse problem

I use logback (file appender, time-based policy, hourly) and logstash send to kafka from logback result.
But when file is rolling, logstash miss some first lines.
I guess that inode in sincedb file is reuse.

Please tell me How I solve this problem? (ignore_older? sincedb_clean_after? filebeat?)

below (my logback config):

<rollingPolicy class="ch.qos.logback.core.rolling.TimeBasedRollingPolicy">

below (my logstash config) :

input {
file {
type => "xxx"
path => [ "/path" ]
start_position => "beginning"
sincedb_write_interval => 1

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.