Logstash stopped running after first run

Elastic Stack Logstash
1

The data loaded the first time, not sure what happened.

I get this notification:

[2018-06-13T14:28:34,944][INFO ][logstash.agent ] Successfully started Logstash API endpoint {:port=>9600}

Then it just sits and waits. This is very confusing.
Sometimes I need the type, sometimes I don't.

Here is my config:
input {

file {
path => ["C:\Users\me\Desktop\2018-AS-Tracking-Visit.csv"]
start_position => "beginning"
}
}


output {

elasticsearch {
hosts => ["xxxxxxxxxxxxxxxxxxxxxxxxxx:9200"]
index => "tracking"
user=>"xxxxxx"
password=>"xxxxxxxxxxxxxxxxxxx"

 
}
stdout { codec => rubydebug }
}
2

A file input records how much of the file it has read in the sincedb. Once it has read the file once the start_position is ignored and if logstash is restarted it will start from the position in the sincedb. It will sit and wait for new data to be appended to the file. So it sounds to me like this is working as expected.

If you want to re-read the whole file every time then set the sincedb_path to "nul".

3

Is there a file called null you can set the sincedb_path to on a Windows machine? I know that for my Linux machines I write to /dev/null, but wasn't sure if there was one or WIndows.

4

It's called "nul" (yes, not "null").

5

Thanks!

Forgot all about that!

6

Do you simply send set the path to just "nul"?

7

sincedb_path => "nul"

1 Like
8

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.