I have thousands of files with just one line per file. I read these files whit filebeat and send them to logstash. But i do not get any output. If I add a new line to a file I get output form logstash.
Where is the problem?
And are there a workaround for this problem?
Filebeat probably already sent the lines once, or the files are to old to be picked up. Either way, the quickest workaround in test is to rename the file and then copy (not rename) it to the original filename.
Do the files end with a newline character?
No. It is just one line in every file
Filebeat and Logstash are line-oriented. They won't send anything until they've seen a newline character.
Is there a tool like filebeat that can read this for me? I have thousands of files on thousands of computers I need to index.
Perhaps you can use an exec input plugin that runs "cat" or a custom script?
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
© 2020. All Rights Reserved - Elasticsearch
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.