Hi, there is an issue with logstash getting log files from remote server over NFS.
Issue described here https://groups.google.com/forum/#!topic/logstash-users/mopVM3hlAic
And here is explanation why it is happening https://stackoverflow.com/questions/6814404/java-inputstream-read-methods-returning-ascii-nul-characters-for-file-in-a-nfs
Short version of explanation if you don't want to follow links:
The NUL characters described in this question appear due to asynchronous writes to the file being read from. More specifically, packets of data from the remote file writer have arrived out of order, and the NAS buffer has committed a later packet and padded the area for the unreceived data with NUL characters. When the missing packet is received, the NAS buffer commits it, overwriting those null characters.
So are there any people who experienced the same problem? How to fix it? (via nfs options, or maybe I have to use other way to mount logs to logstash servers?).
There is also a dirty solution to re-read line when \u0000 character appear, but it seems like default logstash can't do this.