Logstash doesn't read file from beginning

Elastic Stack Logstash
1

I'm installed logstash on one of our linux server and i'm trying to forward application log to ES and visualize in Kibana.

Any New Line being written to the log are being visualized but the file from beginning is not being read. Here is my config, please advise if there's anything wrong with my config.

input {
    file {
            start_position => "beginning"
            path => "/var/log/app/access.log"
            type => "app"
            }
 }


output {
if [type] == "app" {
elasticsearch {
    hosts => [ "<i.p>:9200" ]
    manage_template => false
    index => "logstash-%{+YYYY.MM.dd}"
  }
}
}
2

Read what the documentation and many many previous threads say about sincedb.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.