Rotating File Input Logstash

Elastic Stack Logstash
1

Hi,

Good day, I have this scenario where I have a rotating files picked up by Logstash. The .log file is the active file. If the file reaches a certain size it will rollover and create a new file with the format .log.<+1>. However, it seems like after the file rolls over, Logstash rereads again from the beginning of the file (although the file is rolled over and inactive)

Sample Log Rotation:
test.log
test.log.1
test.log.2

Note that we have set the ff:

start_position = “end”
path = “O:/Documents/test/test.log”

Thanks!

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.