I've noticed that after service restart logstash doesn't apply rules modified in log4j2.properties i.e appender.rolling.policies.size.size = 10MB (I've checked and the file has 12MB so it should work) Generally speaking, the goal is to delete logs older than 7D. appender.rolling.type = RollingFile…

@Badger thx for help the working configuration is below. As you mentioned , appender responsible for deleting the apriopriate logs (logstash-plain-.log.gz) is json_rolling not rolling The following configuration deletes logs ".gz" older than 7D or when their cumulative size is bigger then 100 MB. …

Logstash doesn't take changes from log4j2.properties after restart service

Elastic Stack Logstash

Badger March 9, 2021, 8:33pm 2

You may find this thread useful. Especially the part about the log4j2 properties being applied to the wrong appender.

Topic		Replies	Views
Logstash log4j2.properties logfiles are not deleting Logstash	10	3253	May 3, 2022
Log4j2.properties doubt Elasticsearch	2	229	November 1, 2022
Rotate and remove old Logstash output logs Logstash	8	10193	January 6, 2021
Trouble with logstash log4j2 rotation Logstash	2	1422	July 28, 2017
Manual method for triggering logstash to process log4j2 properties? Logstash	1	820	February 18, 2019

Logstash doesn't take changes from log4j2.properties after restart service

Related topics