Is there any indication that logstash forwarder finished processing a file?

220 Views Asked by At

I would like to delete files after logstash forwarder sent them (otherwise I get too many files open error). Is there any indication that logstash forwarder is done with the file?

1

There are 1 best solutions below

2
On BEST ANSWER

logstash-forwarder keeps a "registry" file called .logstash-forwarder that contains information about the file (really inode) and byte offset into that file.

You can compare that information with the actual file itself to see if LSF is finished.

I do the same to tell is LSF is falling behind in its processing.