logstash should collect the latest data , but it collect the data hours ago
for example, the newest log is 19:00:00 , but it collect the 08:00:00 data
this is my configure
input {
file {
path => [ "/applogs/_metrics/span*.log" ]
start_position => "end"
}
stdin { }
}
output {
kafka {
codec => plain {
format => "%{message}"
}
topic_id => "open_falcon_span"
broker_list => "192.168.2.177:9091,192.168.2.178:9092,192.168.2.179:9093"
}
#stdout { codec => rubydebug }
}
i dont understand why