Hi,
When I am reading a file with logstash, the logstash reads the file once and then goes back again to the top to read it again.
I am using the below config file:-
input {
file {
path => "/apps/elk/elkscripts/loadfile/file.log"
sincedb_path => '/opt/logstash/log.db'
sincedb_write_interval => 0
type => 'log'
}
}
filter {
##filter ocnditions
}
output {
elasticsearch {
hosts => '<IP>'
index => 'prod-log-%{+YYYY.MM.dd}'
}
stdout {
codec => rubydebug
}
}