hi, trying to read sqlite .db files using jdbc plugin and here is the configuration file for logstash below.
input {
jdbc {
jdbc_driver_library => "D:/etc/driver/sqlite-jdbc-3.32.3.2.jar"
jdbc_driver_class => "org.sqlite.JDBC"
jdbc_connection_string => "jdbc:sqlite:C:/logfile/1/API-SqLiteLogTracing-2020-11-09.db"
jdbc_user => ""
use_column_value => true
schedule => "* * * * *"
statement => "SELECT * FROM Log"
tracking_column => logid
}
}
output {
elasticsearch {
hosts => ["http://localhost:9200"]
index => "cimindex"
}
stdout {
codec => rubydebug
}
}
But i have multiple .db files which are created on basis of date.
For example -
API-SqLiteLogTracing-2020-11-13.db
API-SqLiteLogTracing-2020-11-12.db
API-SqLiteLogTracing-2020-11-11.db
API-SqLiteLogTracing-2020-11-10.db
API-SqLiteLogTracing-2020-11-09.db
and soon..
So, please help me for this, how to modify configuration file for logstash for multiple sqlite .db files.
I have tried wildcards in file name like this (API-SqLiteLogTracing-*.db) but that doesn't work and giving me error file not found.