Logstash 7.17 on Windows - Pipeline running but logs are not present in Elasticsearch

That will persist the in-memory sincedb across restarts in a file called NULL in logstash's working directory. If you do not want the sincedb persisted then use "NUL".

If that does not fix things, then set --log.level trace and look for messages from the filewatch module.

1 Like