Answer the question
In order to leave comments, you need to log in
How to force to read a log file at logstash startup?
Hello,
There were a couple of questions about logstash:
1) When specifying input file filter(grok) output, the log is not parsed at startup. Parsing only starts when writing to the file starts (adding a line). How to make logstash parse logs immediately? I will have static logs that will not change -> load, parse and elasticsearch-> kibana
2) There are folders in each of them with 2 log files. Is it possible in logstash to parse each folder in turn, fields from 2 files in 1 json and start parsing the folder trace
Thank you very much !!
Answer the question
In order to leave comments, you need to log in
To parse files, you need to use filebeat, in which work with files is organized in a human way.
Didn't find what you were looking for?
Ask your questionAsk a Question
731 491 924 answers to any question