Multiple logs are getting dumped because inode value of same file is different on each server(server that have auto scalling)

Elastic Stack Logstash
1

We have Linux servers in the cloud having "auto-scaling".
The logs of the servers are created in the shared path(named /logs).PFA the format of the log path:

Syntax : /logs///server.log
Example: /logs/HOSTNAME0/2019-03-01/server.log

inode value of the same file is different on each server. Due to this, the sincedb is not working as it is supposed to.
Example:

inode value of file @ path /logs/HOSTNAME0/2019-06-20-13:55/server.log on server 1: 654
inode value of file @ path /logs/HOSTNAME0/2019-06-20-13:55/server.log on server 2 :151

If we do the input configuration like : /logs///server.log
then the same logs are being sent from all the servers.

Any inputs as to how we can go about fixing this issue and get our setup up and running. Much appreciated.

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.