Hello community. I am using logstash to parse a logfile and index to elastic I have seen that if I enter a new line in the file, logstash is indexing the newline but also the last indexed line Looks like a bug an it comes with release 6.5.1, 6.6.1 and 7.0.0 Can you help please?

Any way if I put an entry in the file with echo command I get everything work perfectly. I am sorry I didnot expect vi could damage the sincedb Best regards Luca Razzi

Discuss the Elastic Stack

Logstash is reindexing lastline and newline

Elastic Stack Logstash

Badger April 16, 2019, 6:07pm 6

I cannot think of a way to explain that. You will need to enable TRACE level logging for the filewatch components. Take a look at this post for instructions.

Topic		Replies	Views
Logstash Does Not Read In Last Line of Log Logstash	16	9438	July 6, 2017
Last line of log repeatedly gets indexed/processed to elastic/kibana Logstash	1	229	August 20, 2020
Updating config file Logstash	6	512	November 3, 2021
Last line of CSV file not parsed/indexed Logstash	3	603	July 6, 2017
Strange observation in ELK Logstash	4	1304	May 25, 2017

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Logstash is reindexing lastline and newline

Related topics