Below is my code. When I try to run this pipeline. Pipeline is starting but not parsing the logs. I have deleted .sincedb files at (data/plugins/inputs/file). input { file { path => ".../directory/*.log" } } filter { } output { stdout{ codec => rubydebug } } B…

Hi, [image] rknd: Pipeline is starting but not parsing the logs The default for start_position is end so it will only ingest entries that are written after LogStash found the file for the first time. Are you sure there were log entries written after that? Have you tried setting the log.leve…

Logstash doesn't parse logs if i don't define start_position

Elastic Stack Logstash

rknd (rknd) February 24, 2021, 1:22pm 3

I think thats the answer.I have checked the box. I didn't get same problem again after your answer. If something could be different I will comment it. Thanks again.

Topic		Replies	Views
Logstash does not start analysing directly Logstash	4	553	September 22, 2017
Start_position => "end" Logstash	6	4754	August 22, 2018
Start_position: beggining Logstash	3	947	December 19, 2016
Logstash + sincedb_path and start_position Logstash	2	14815	July 6, 2017
Input file start_position => "beginning" doesn't work even after deleting .sincedb files Logstash	2	2926	March 22, 2017

Logstash doesn't parse logs if i don't define start_position

Related topics