Start from scratch every time you read a file for window logstash-input-file

Elastic Stack Logstash
1

I know if linux just set
sincedb_path => "/dev/null"
but my os is window,and I find a method set sincedb_path => "NUL",and it's not useful
so if I want to realized this effect ,how I can do

2

I've got these lines in my windows conf file, they seem to work...

			start_position => "beginning"
			sincedb_path => "NUL"
3

Give a full path to your sincedb_path or remove it

sincedb_path => "C:/Users/xxx/Desktop/FortiGate/traffic.log.sincedb"

If you don't provide it, logstash will automatically add a new one, I recommand that you set one

C:\logstash\data\plugins\inputs\file\.sincedb_5827d2ab6eb5f64d39132ba39f70c70e
4

is ok?
but my computer is not usefull
are you sure that you can read from beginng every time when your logstash trigger read operation

5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.