CODEWITHSUNDEEP
logstashlogstash-forwarder
prem
prem

Reputation: 604

Logstash forwarder error

Logstash forwarder

While running logstash forwarder I'm seeing skipping old file error.

**/opt/lumberjack/bin/lumberjack -config /etc/logstash-forwarder/logstash-forwarder.conf -from-beginning=true**
2015/01/13 14:47:30 publisher init
2015/01/13 14:47:30 {
"network": {
"servers": [ "xxx.xxx.xxx.xxx:6782" ],
"ssl ca": "/etc/logstash-forwarder/server.crt",
"ssl key": "/etc/logstash-forwarder/server.key",
"timeout": 15
},
"files": [
{
"paths": [
"/opt/test/*.log"
]
}
]
}

2015/01/13 14:47:30.399484 Skipping old file: /opt/test/mc.l28.log

2015/01/13 14:47:30.399598 Setting trusted CA from file: /etc/logstash-forwarder/server.crt

2015/01/13 14:47:30.399938 Connecting to xxx.xxx.xx.xxx.:6782

2015/01/13 14:47:30.962701 Connected to xxx.xxx.xxx.xxx:6782

Upvotes: 0

Views: 504

Answers (1)

Alain Collins
Alain Collins

Reputation: 16362

logstash-forwarder doesn't want to keep old files open, which would consume system resources for files that seem stale. The default is 24 hours.

In the latest code, you can change this value with the 'dead time' parameter.

Upvotes: 1

Related Questions