elastic / elastic/logstash

Log file not read correctly. Logs are processed twice.

Open
#5,461 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Java
Stars
14.9k
Forks
3.5k
Avg merge
19h 14m
Merged PRs (30d)
63

Description

- Version: 5 Alpha 3
- Operating System: Debian
- Config File: http://pastebin.com/zMg7pAje
- Sample Data: Any JSON
- Steps to Reproduce:
1. Write JSON_A to log file using echo JSON >> FILE
2. Edit FILE with vim and insert JSON_B to the end of the file. Save
3. Edit FILE with vim and insert JSON_C to the end of the file. Save

In Step 1 everything runs fine. In Step 2 sincedb is not updated correctly but the log is inserted correctly. In Step 3 sincedb ist not updated correctly and JSON_B and JSON_C are inserted. Expected is only JSON_C.

Question: What is the difference between appending a file with >> and editing with vim and inserting something at the end manually? Only difference I was able to notice is that the access date is updated when editing with vim.

Note: When appeding with >> instead of vim everything works fine.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.