Unable to register last access file

Elastic Stack Logstash
1

I observed that when I use elasticsearch as Input in logstash, it does not register the last instance it sends.
Ex. my server got disconnected, so it will start to overwrite again the data.
Another thing is that if my input is elasticsearch, if there';s a new data input in elasticsearch, it started all over again.

I don't know if this is right, it is just based on my observation.
Any inputs from you are so much welcome and truly appreciated.

2

up :heart:

3

This is exactly how the elasticsearch input works. Unlike the file and jdbc inputs it doesn't keep track of what it already has processed.

1 Like
4

Thanks for your reply @magnusbaeck.

5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.