I have an S3 bucket filled with kinesis logs.
I want to re scan entirely this bucket but I didn't manage to do it.
I've tried to delete the sincedb file ( /var/lib/logstash/plugins/inputs/s3/sincedb_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx), but after restarting logstash, it regenerate it, start re rescan from the first file found in S3 bucket (2 weeks ago) BUT it only send to elasticsearch logs starting from the current date/time.
Can anyone tell me why logstash don't send to ES old logs but only logs from its starting time ?
Thank you !