I have a logfile in a shared path (//XXXX/storage/files/test.log) with 100 lines.
I am processing the it with logstash with the below input cong:
input {
file {
path => "//XXXX/storage/files/test.log"
start_position => "beginning"
}
}
But, logstash is processing the same 100 lines of the file again and again.
I want it to stop after it processes the file once.
sincedb_path is what I would suggest. Point it to a location and it will create a text file that keeps track of the location of the location in the file it has read.
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.