Question

我希望Logstash在没有新行时解析我的文件。

但它不起作用：

[2017-05-09T17:28:07,523][DEBUG][logstash.inputs.file     ] each: new inode: /exports/export4hadoop_FULL.csv: old inode was ["136139751", 0, 64769], new is 
["136139747", 0, 64769]
[2017-05-09T17:28:07,523][DEBUG][logstash.inputs.file     ] :delete for /exports/export4hadoop_FULL.csv, closing file
[2017-05-09T17:28:07,525][DEBUG][logstash.inputs.file     ] _open_file: /exports/export4hadoop_FULL.csv: opening
[2017-05-09T17:28:07,526][DEBUG][logstash.inputs.file     ] /exports/export4hadoop_FULL.csv: sincedb last value 985877, cur size 985877
[2017-05-09T17:28:07,526][DEBUG][logstash.inputs.file     ] /exports/export4hadoop_FULL.csv: sincedb: seeking to 985877

我的配置文件：

input {
 file {
  path => "/exports/export4hadoop_FULL.csv"
  start_position => "beginning"
  sincedb_path => "/dev/null"
 }
}

我在主目录下找不到任何.sincedb文件。我不知道Logstash使用的.sincedb文件在哪里..

我不明白它存储.sincedb的原因，因为我指定了 sincedb_path =＆gt; “的/ dev / null的”

谢谢：）

Answer 1

sincedb_path值默认使用的文件位于;

LOGSTASH_HOME \数据\插件\输入\文件

我建议您检查该文件夹中的任何文件，删除它们并重新运行测试。

sincedb_path / dev / null不起作用

1 个答案: