Hey i am working on data visulization using kibana.
So for that i am reading my log file using logstash but my problem is whenever i click on refresh button in kibana whole log file is read again. But i want to read the log file from the last read position that is i want to read the newely inserted records.
Need urgent help!!!!!!!!!!!!
I am attaching the code my config file below:
input{
file{
type => "log"
path =>"/home/dummy.log"
start_position =>"beginning"
sincedb_path => "/dev/null"
}
}
filter {
grok {
match => [
"message","(?[\d-]+)\s(?[\d:]+),(?[\w]+):(?[\w-/]+)"
]
}
}
output {
elasticsearch {
host => "localhost"
index=> "dummy"
document_type => "dummy_sample"
}
}