Messages/Lines are coming more than once in log stash output

Elastic Stack Logstash
1

Here is my configuration file

input {


        file {

                path => "myFile.xml"
                start_position => "beginning"

      codec => multiline {
      pattern => "((^<x>)|(^</y>))"
      negate => false
      what => "previous"



}
 }
}

Note I am using XML plugin in filters because my input is the XML file.

Every time I am inserting a new event in an audit file it's repeating its previous event in logstash output. I guess it's not keeping track of the end of the file.

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.