Hi Team,
I made some changes in environment (nothing on logstash.conf) primarily for shield and everything is working fine, beats are sending logs and dashboard is also showing correct data.
But S3 input is trying to pull 1 month back data (from 2016/08/26/) and i don't want that, it was already processed. How can i ask logstash to pull only last 2 days records from S3?
I found an option "exclude_pattern" but not sure how it work.
*Debug mode shows that it's pulling data from S3 and for date 2016/08/30/
Thanks & Regards,