Dear Community,
We are Using Logstash 2.1 version, facing issue while using translate filter even refresh interval has applied.
Logstah is able to identify the new entries added to the YAML file but not able to read the updated file when entries got deleted (Logstash is considering Deleted entries are still available in the Dictionary file)
Translate filter condition looks like below.
translate {
field => "username"
destination => "invalid_user"
refresh_interval => 5
dictionary_path => "/opt/logstash/vpn_invalid.yml"
add_tag => [ "invaliduser" ]
}