Not able to create index after first index uisng imap input plugin

Elastic Stack Logstash
1

Hi All

I created a index using imap plugin. It went through successfully first time
Then i realized i should change some fields type using template and i deleted the index

I re ran the logstash using same config file without doing any changes, but it is not creating index.

I suspect there is something like sincedb_file in imap also. But don't know where it is

Here is my imap config file

input {
  imap {
    host => "imap.gmail.com"
    user => "abc@gmail.com"
    password => "abc"
    port => 993
    secure => true
  }
}



output {  
stdout { codec => rubydebug}
    elasticsearch { 
	   action => "index"
       hosts => "127.0.0.1:9200"	   
       index => "emailtest"       
       workers => 1
    }
 }
2

No one facing this problem?

I think this is common problem with all plugins in 2.3.4 logstash

I solved the problem of file using sincedb_file, but how to solve for imap?

3

Hi All

I tried again downloaded brand new ES and Logstash and repeated the steps.
I am able to create index for first time

after deleting and recreating the index is not possible

4

Anyone have solution for this????

5

AFAICT the imap input only processes unread messages, so to reprocess messages you'd have to mark them an unseen on the IMAP server.

Anyone have solution for this????

Please have patience.

2 Likes
6

Yes, this is working perfectly now

The mails should be unread to make it work.

Thanks a lot