Logstash is not pick up updated logs in newly created Log file with a same name after backup

[harshbajaj16 (Harsh Bajaj)]

Hi @ldeepak,

@ldeepak

please let me know in case of any extra information required for your analysis.

Could you please share your logstash input plugin configuration for more understanding?

Meanwhile, You need to set some parameter in your input plugin to read the file again from beginning. Please refer below post as they have explained in details how the input plugin works.

Importing the same file

Hi, I just have a conceptual question about how logstash import same files. Let's say I have done with the previous data ingesting. I terminated the process of logstash after that.And I do not change the data source file or corresponding config file. They are exactly same as before. If I restart the logstash with the same config setting, would the data be replaced by the new one(even if they are same) or logstash automatically recognizes they are same so it will not import any new data?

Regards,
Harsh Bajaj