fluentd in_tail plugin pos_file content format -


i'm using fluentd tail log files , and push logs elastic search index. have 2 questions -

1) how fluentd store position last read given file? example in pos file -

/myfolder/myfile.log     00000000004cfccb        0000000000116ce0 

what values 00000000004cfccb , 0000000000116ce0 denote?

2) particular file (myfile.log) has 2520 lines in total. reason last 100 lines not read. restarted td agent still failed read last 100 lines. when can happen?

my td-agent source looks -

<source>   type tail   format none   path /myfolder/*.log   pos_file /var/log/td-agent/mylogfiles.pos   tag mylog.*   read_from_head true </source> 

thanks,

for 1, see comment: https://github.com/fluent/fluentd/blob/5ed4b29ebda0815edb7bdd444e7e5ca2e9874a27/lib/fluent/plugin/in_tail.rb#l652. hex number of position in file , inode of file.

for 2, putting events file 2420 lines? can check problem in_tail or out_elasticsearch below.

<match mylog.*>   type copy   <store>     type file   </store>   <store>     type elasticsearch   </store> </match> 

Comments

Popular posts from this blog

html - Firefox flex bug applied to buttons? -

html - Missing border-right in select on Firefox -

python - build a suggestions list using fuzzywuzzy -