how to reset file parse in Logstash? -


many questions have been seen here in stackoverflow on similar subject this question. none of them helped reset logstash. i've used:

input {   file {     path => ["/var/log/nginx/access.log"]     start_position => "beginning"   } } 

i've read .sincedb can set. don't have these files think unnecessary set file path that.

is there other place reset logstash? why such simple method hard do?


edit1: i've tried sincedb_path /dev/null this question has been said. again read today not beginning of log file.

you can hand modifying .sincedb file.

according documentation :

sincedb files text files 4 columns:
1. inode number (or equivalent).
2. major device number of file system (or equivalent).
3. minor device number of file system (or equivalent).
4. current byte offset within file.

so if change last number 0 restart file @ beginning.


Comments

Popular posts from this blog

testing - Detect whether test has failed within fixture -

AbotX : How do you create a parallel crawler that stays on and can be added to at run time from new requests -

android - Create single AAR file from multiple modules using Gradle -