fluentd in_tail plugin pos_file content format -
i'm using fluentd tail log files , and push logs elastic search index. have 2 questions -
1) how fluentd store position last read given file? example in pos file -
/myfolder/myfile.log 00000000004cfccb 0000000000116ce0
what values 00000000004cfccb
, 0000000000116ce0
denote?
2) particular file (myfile.log
) has 2520 lines in total. reason last 100 lines not read. restarted td agent still failed read last 100 lines. when can happen?
my td-agent source looks -
<source> type tail format none path /myfolder/*.log pos_file /var/log/td-agent/mylogfiles.pos tag mylog.* read_from_head true </source>
thanks,
for 1, see comment: https://github.com/fluent/fluentd/blob/5ed4b29ebda0815edb7bdd444e7e5ca2e9874a27/lib/fluent/plugin/in_tail.rb#l652. hex number of position in file , inode of file.
for 2, putting events file 2420 lines? can check problem in_tail or out_elasticsearch below.
<match mylog.*> type copy <store> type file </store> <store> type elasticsearch </store> </match>
Comments
Post a Comment