CODEWITHSUNDEEP
logstash
sop
sop

Reputation: 3625

How to skip logs period for logstash?

I have run a logstash from an user and now, I have created logstash user. The problem of running the script from the new user is that I have to wait until it loads all the logs until now. It does not know what logstash has done in the run of the previous user. Is there a possibility to run it starting with a date, like yesterday, or today?

Upvotes: 2

Views: 182

Answers (2)

akshaya pandey
akshaya pandey

Reputation: 997

You could use a drop though to just discard things before this date.

Upvotes: 0

Alcanzar
Alcanzar

Reputation: 17165

All you really need to do is copy your sincedb from the old user to the new user. It should be the directory $HOME/.sincedb of the old user.

Upvotes: 2

Related Questions