Logstash - Detect Filebeat EOF


(Cónall Prendergast) #1

Hi,

Is it possible for logstash to detect an EOF in one of the Filebeat files.
So for my application I store some information in a custom plugin and I want it to be flushed when filebeat reaches EOF.

Can filebeat send some kind of event to logstash when it finished a file? Sort of loke an AT command?

Cheers


(ruflin) #2

All events look currently the same. In case LS knows the file size, offset + content bytes == filesize would mean it is the last event. But I assume LS does not know the filesize :frowning:


(system) #3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.