I know if linux just set
sincedb_path => "/dev/null"
but my os is window,and I find a method set sincedb_path => "NUL",and it's not useful
so if I want to realized this effect ,how I can do
I've got these lines in my windows conf file, they seem to work...
start_position => "beginning"
sincedb_path => "NUL"
Give a full path to your sincedb_path or remove it
sincedb_path => "C:/Users/xxx/Desktop/FortiGate/traffic.log.sincedb"
If you don't provide it, logstash will automatically add a new one, I recommand that you set one
C:\logstash\data\plugins\inputs\file\.sincedb_5827d2ab6eb5f64d39132ba39f70c70e
is ok?
but my computer is not usefull
are you sure that you can read from beginng every time when your logstash trigger read operation