Enfore different order for reading files in logstash -
i have multiple log files written in descending order. i.e contents of xyz.log.5 written before contents of log xyz.log.4. number of log files unknown.
so, i'm using wildcard read files
input{ file{ path => "path/to/file/xyz.log.*" ...... ...... } }
but reading files in ascending order. reading in descending order important because logs contain time based events span on multiple files , i'm calculating time intervals using elapsed filter. so, i'm getting incorrect time intervals reading order different.
is there way force logstash read in descending order?
Comments
Post a Comment