Hello community. I am using logstash to parse a logfile and index to elastic I have seen that if I enter a new line in the file, logstash is indexing the newline but also the last indexed line Looks like a bug an it comes with release 6.5.1, 6.6.1 and 7.0.0 Can you help please?

Any way if I put an entry in the file with echo command I get everything work perfectly. I am sorry I didnot expect vi could damage the sincedb Best regards Luca Razzi

Discuss the Elastic Stack

Logstash is reindexing lastline and newline

Elastic Stack Logstash

anon73256657 April 18, 2019, 9:29am 21

OK Thanks for the help and the post

Topic		Replies	Views
Problem with sincedb Logstash	5	1431	May 30, 2017
Index only created if sincedb_path = /dev/null Logstash	3	7974	February 18, 2019
Not able to use since_db properly Logstash	2	300	July 30, 2019
Sincedb doesn't updated until tail reaches the end of the file Logstash	4	2066	July 6, 2017
Trouble with Logstash sincedb file Logstash	2	1029	January 4, 2019

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Logstash is reindexing lastline and newline

Related topics