how to reset file parse in Logstash? -
many questions have been seen here in stackoverflow on similar subject this question. none of them helped reset logstash. i've used:
input { file { path => ["/var/log/nginx/access.log"] start_position => "beginning" } }
i've read .sincedb
can set. don't have these files think unnecessary set file path that.
is there other place reset logstash? why such simple method hard do?
edit1: i've tried sincedb_path
/dev/null
this question has been said. again read today not beginning of log file.
you can hand modifying .sincedb file.
according documentation :
sincedb files text files 4 columns:
1. inode number (or equivalent).
2. major device number of file system (or equivalent).
3. minor device number of file system (or equivalent).
4. current byte offset within file.
so if change last number 0 restart file @ beginning.
Comments
Post a Comment