I'm having little trouble understanding Logstash a bit. I've already imported a file using Logstash and I've tried to update the index but it updates it only if I set sincedb_path to NUL. Can someone explain? Thanks.
The sincedb is an in-memory database that records which files logstash has read and how much of each file it has read, so that if data is appended to the file logstash knows to consume it.
sincedb_path is used to persist the in-memory database across restarts. That means that if you set sincedb_path to NUL (on Windows, or /dev/null on UNIX) then when logstash is restarted it thinks every file is new and will re-read it.
2 Likes
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.