->I tried by adding a new line but did not updated i.e. did not sent the new line to logstash.
I added at the bottom of the file.
->When we stop the filebeat, how can it continue to send the data.
this is my filebeat.yml config file
filebeat.prospectors:
-
type: log
paths:
- c:\Users\Nadeem.Pasha\Desktop\LOGS\proform-3.3.log.*
scan_frequency: 10s
- c:\Users\Nadeem.Pasha\Desktop\LOGS\proform-3.3.log.*
and logstashconfiguration file is
input {
beats {
port => 5044
}
}
filter {
}
output {
elasticsearch {
hosts => "localhost:9200"
manage_template => false
index => "%{[@metadata][beat]}-%{[@metadata][version]}-%{+YYYY.MM.dd}"
document_type => "%{[@metadata][type]}"
}
stdout { codec => rubydebug }
}