Hi,
I am trying to parse some mactimes and upload them to elastic using logstash. All data will get there without problem, but the logstash process won't stop, I have to stop it manualy. Also nothing is logged in /var/log/logstash/logstash-plain.log
Any help would be appreciated.
logstash version 5.6.10
/usr/share/logstash/bin/logstash -f /etc/logstash/conf.d/logstash_csv.conf
input {
file {
path => "/path/to/my/file"
start_position => "beginning"
sincedb_path => "/dev/null"
}
}
filter {
csv {
columns => [ "Date", "Size", "Type", "Mode", "UID", "GID", "Meta", "File Name" ]
separator => ","
skip_header => "true"
}
date {
match => [ "Date", "E MMM dd yyyy HH:mm:ss" ]
target => "@timestamp"
remove_field => [ "Date" ]
}
}
output {
elasticsearch {
hosts => "localhost:9200"
index => "metadata"
document_type => "mactimes"
}
stdout {}
}