Question regarding file and folder permissions when it comes to File output plugin

Elastic Stack Logstash
1

Problem

  1. In my Output plugin I want to write all grok parse failures to a file

    else if "_grokparsefailure" in [tags] {
            file {
                  path => "/home/anotherAccount/testfolder/grokfailures"
                  file_mode => 0600
                 }
            }

  2. I have two servers on which I have the same configs. My file and parent folders permissions are as follows:

1
11077×189 69 KB

  1. My question is - with these permissions on the parent folders . and .. and on the grokfailures file, would that config work and all failures be written on disc in this file? I'm only asking proactively since my parser is working just fine at the moment and I have no failures and I prefer not to mess with it in all honesty :slight_smile:

Also, from the Logstash doco, i don't quite understand the part about file_mode option and it's default -1 value?

Reference - File output plugin | Logstash Reference [7.14] | Elastic

Thank you very much in advance :slight_smile:

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.