Logstash Sending older logs

Also, you set start_position => "beginning", so if a log file covers multiple days you have asked for all the old data to be included. Perhaps start_position => "end" would work better for you.

2 Likes