Hello community. I am using logstash to parse a logfile and index to elastic I have seen that if I enter a new line in the file, logstash is indexing the newline but also the last indexed line Looks like a bug an it comes with release 6.5.1, 6.6.1 and 7.0.0 Can you help please?

Any way if I put an entry in the file with echo command I get everything work perfectly. I am sorry I didnot expect vi could damage the sincedb Best regards Luca Razzi

Discuss the Elastic Stack

Logstash is reindexing lastline and newline

Elastic Stack Logstash

Badger April 16, 2019, 6:07pm 6

I cannot think of a way to explain that. You will need to enable TRACE level logging for the filewatch components. Take a look at this post for instructions.

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.