With this config:
input {
file {
codec => multiline {
...
patterns_dir => [
'/path/to/patterns'
]
...
}
}
}
and the existing / readable file:
/path/to/patterns/file
that contains user patterns, I'm getting this:
[DEBUG][logstash.config.source.local.configpathloader] Skipping the following files while reading config since they don't match the specified glob pattern {:files=>["/path/to/patterns"]}
The patterns file does not get picked up at all, everything else is from logstash-patterns-core-4.1.2:
[DEBUG][logstash.codecs.multiline] Grok loading patterns from file {:path=>"/logstash/vendor/bundle/jruby/2.3.0/gems/logstash-patterns-core-4.1.2/patterns/haproxy"}
[DEBUG][logstash.codecs.multiline] Grok loading patterns from file {:path=>"/logstash/vendor/bundle/jruby/2.3.0/gems/logstash-patterns-core-4.1.2/patterns/bro"}
[DEBUG][logstash.codecs.multiline] Grok loading patterns from file {:path=>"/logstash/vendor/bundle/jruby/2.3.0/gems/logstash-patterns-core-4.1.2/patterns/exim"}
[DEBUG][logstash.codecs.multiline] Grok loading patterns from file {:path=>"/logstash/vendor/bundle/jruby/2.3.0/gems/logstash-patterns-core-4.1.2/patterns/aws"}
[DEBUG][logstash.codecs.multiline] Grok loading patterns from file {:path=>"/logstash/vendor/bundle/jruby/2.3.0/gems/logstash-patterns-core-4.1.2/patterns/bacula"}
[DEBUG][logstash.codecs.multiline] Grok loading patterns from file {:path=>"/logstash/vendor/bundle/jruby/2.3.0/gems/logstash-patterns-core-4.1.2/patterns/postgresql"}
[DEBUG][logstash.codecs.multiline] Grok loading patterns from file {:path=>"/logstash/vendor/bundle/jruby/2.3.0/gems/logstash-patterns-core-4.1.2/patterns/redis"}
[DEBUG][logstash.codecs.multiline] Grok loading patterns from file {:path=>"/logstash/vendor/bundle/jruby/2.3.0/gems/logstash-patterns-core-4.1.2/patterns/squid"}
[DEBUG][logstash.codecs.multiline] Grok loading patterns from file {:path=>"/logstash/vendor/bundle/jruby/2.3.0/gems/logstash-patterns-core-4.1.2/patterns/nagios"}
[DEBUG][logstash.codecs.multiline] Grok loading patterns from file {:path=>"/logstash/vendor/bundle/jruby/2.3.0/gems/logstash-patterns-core-4.1.2/patterns/mcollective"}
[DEBUG][logstash.codecs.multiline] Grok loading patterns from file {:path=>"/logstash/vendor/bundle/jruby/2.3.0/gems/logstash-patterns-core-4.1.2/patterns/rails"}
[DEBUG][logstash.codecs.multiline] Grok loading patterns from file {:path=>"/logstash/vendor/bundle/jruby/2.3.0/gems/logstash-patterns-core-4.1.2/patterns/grok-patterns"}
[DEBUG][logstash.codecs.multiline] Grok loading patterns from file {:path=>"/logstash/vendor/bundle/jruby/2.3.0/gems/logstash-patterns-core-4.1.2/patterns/httpd"}
[DEBUG][logstash.codecs.multiline] Grok loading patterns from file {:path=>"/logstash/vendor/bundle/jruby/2.3.0/gems/logstash-patterns-core-4.1.2/patterns/ruby"}
[DEBUG][logstash.codecs.multiline] Grok loading patterns from file {:path=>"/logstash/vendor/bundle/jruby/2.3.0/gems/logstash-patterns-core-4.1.2/patterns/firewalls"}
[DEBUG][logstash.codecs.multiline] Grok loading patterns from file {:path=>"/logstash/vendor/bundle/jruby/2.3.0/gems/logstash-patterns-core-4.1.2/patterns/mcollective-patterns"}
[DEBUG][logstash.codecs.multiline] Grok loading patterns from file {:path=>"/logstash/vendor/bundle/jruby/2.3.0/gems/logstash-patterns-core-4.1.2/patterns/mongodb"}
[DEBUG][logstash.codecs.multiline] Grok loading patterns from file {:path=>"/logstash/vendor/bundle/jruby/2.3.0/gems/logstash-patterns-core-4.1.2/patterns/java"}
[DEBUG][logstash.codecs.multiline] Grok loading patterns from file {:path=>"/logstash/vendor/bundle/jruby/2.3.0/gems/logstash-patterns-core-4.1.2/patterns/maven"}
[DEBUG][logstash.codecs.multiline] Grok loading patterns from file {:path=>"/logstash/vendor/bundle/jruby/2.3.0/gems/logstash-patterns-core-4.1.2/patterns/junos"}
[DEBUG][logstash.codecs.multiline] Grok loading patterns from file {:path=>"/logstash/vendor/bundle/jruby/2.3.0/gems/logstash-patterns-core-4.1.2/patterns/bind"}
What am I doing wrong?