Logstash - Filebeat doesnt parse every line of IIS Logs


I am trying to parse IIS logs from a log file on the server, the grok filters are not the problem because i tried without it.

Logstash parse only half of the lines in the log file, for example :

The IIS Log file has events from 1:00 AM to 12:00 PM, but logstash only parses from 3:00 AM (for example) to 9:00 PM. The first and last event parsed are random, there is no order in the parsin.

Does anybody knows how to force logstash to parse every line of the log ?

Thank you for your help.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.