I'm not sure if this will get you exactly what you want but it may get close.
It may be a good idea to use filebeat and then set the scan_frequency to see when a file is updated.
Then send the data to a logstash beats input.
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.