Logstash file input plugin picks different files other than specified path

Elastic Stack Logstash
1

Hi , I am using the file input plugin , here is my config

nput {
    file {
            type => "tomeeaccess_passport"
            path => "/etc/logstash/logs/localhost_access_log..2023-04-20.txt"
            start_position => beginning
            #sincedb_path => "/opt/logstash/sincedb-access"
    }
}
output {
    elasticsearch {
            hosts => "http://elastic_ip:9200"
            user => "elastic"
            password => "pwd"
            index => "access_passport%{+YYYY.MM.dd}"
    }
}

When i check the logs in ths index i am getting logs from /var/logs/httpd and /var/log/messages and /var/log/syslog I don't even have httpd on this machine. i Dont know how it is accessing that. I There is not even a single entry from specified path

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.