Hi Team,
We have one use case where we need to read the server logs. We only want to read the log once at the same time don't want to loss single event.
All the logging happening in X.log file and which is rolling after every 10MB size. Means, once the 10MB file size is reach, we are renaming a log file as X.log.date.
We are only passing the X.log file in logstash input file path. The issue with only X.log file is that we will loss the events if logstash is down for some time. We can't pass X.log.* as file input path otherwise it will duplicate the event in case of rollover.
Please suggest what is the proper way to handle such case.
Ankit