Reading a file with file input

[Lavinia_Maties (Lavinia)]

Hi everyone, I have a problem parsing my file using Logstash on windows 10.
this is my .conf file :
input {
file {
path => "C:\ProgramData\ELK\Logs\CBS\CBS.log"
}
}

filter {
grok {
match => { "message" => "%{DATESTAMP:time}, %{WORD:inform} %{SPACE} %{GREEDYDATA:rest}" }
}
date {
match => [ "timestamp" , "dd/MMM/yyyy:HH:mm:ss Z" ]
}
}

output {
elasticsearch { hosts => ["localhost:9200"] }
stdout { codec => rubydebug }
}
I'am using Logstash 7.0.0. I try to change to 6.2.4 version but I can't apparently is seems to not recognize java VM .. so any help is good. Thank you

[Badger]

Use forward slash in the path option for the file input.

What problem are you having?

[Lavinia_Maties (Lavinia)]

Hi,
The problem is that I can see any index in Elasticsearch.. it seems that my file is not read at all. I tried with forward slash but is steel not working
Logstash is Successfully started but then nothing happens

[Badger]

Try

file {
    path => "C:/ProgramData/ELK/Logs/CBS/CBS.log"
    start_position => "beginning"
    sincedb_path => "NUL"
}

[Lavinia_Maties (Lavinia)]

I tried, but is not working.
Thanks anyway

[Badger]

Set the log.level to trace and see what filewatch says.

[Lavinia_Maties (Lavinia)]

Yea, actually that was a problem with log path, I didn't define the log extension correctly. But it's ok now.
Thank you for your support