Logstash stuck after all data inserted without any error


(Frantisek Hrdina) #1

Hi,
I am trying to parse some mactimes and upload them to elastic using logstash. All data will get there without problem, but the logstash process won't stop, I have to stop it manualy. Also nothing is logged in /var/log/logstash/logstash-plain.log

Any help would be appreciated.

logstash version 5.6.10

/usr/share/logstash/bin/logstash -f /etc/logstash/conf.d/logstash_csv.conf

input {
  file {
    path => "/path/to/my/file"
    start_position => "beginning"
    sincedb_path => "/dev/null"
  }   
} 
 
filter {
  csv {
    columns => [ "Date", "Size", "Type", "Mode", "UID", "GID", "Meta", "File Name" ]
    separator => ","
    skip_header => "true"
  } 
  date {
    match => [ "Date", "E MMM dd yyyy HH:mm:ss" ]
    target => "@timestamp"
    remove_field => [ "Date" ]
  }  

} 

output {
  elasticsearch {
    hosts => "localhost:9200"
    index => "metadata"
    document_type => "mactimes"
  }
  stdout {}
}

#2

A file input in logstash will run forever, tailing the file, waiting to see if additional lines are written to the log. This is normal.


(Frantisek Hrdina) #3

Oh, I didn't know that. However, thank you for your answer :slight_smile: !


(system) #4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.