V
V
vvrider2017-09-21 11:07:28
Parsing
vvrider, 2017-09-21 11:07:28

How to force to read a log file at logstash startup?

Hello,
There were a couple of questions about logstash:
1) When specifying input file filter(grok) output, the log is not parsed at startup. Parsing only starts when writing to the file starts (adding a line). How to make logstash parse logs immediately? I will have static logs that will not change -> load, parse and elasticsearch-> kibana
2) There are folders in each of them with 2 log files. Is it possible in logstash to parse each folder in turn, fields from 2 files in 1 json and start parsing the folder trace
Thank you very much !!

Answer the question

In order to leave comments, you need to log in

1 answer(s)
C
chupasaurus, 2017-09-21
@chupasaurus

To parse files, you need to use filebeat, in which work with files is organized in a human way.

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question