ELK,萌萌哒

Logstash 中close_order设置关闭时长无效

Logstash | 作者 小明怕黑 | 发布于2018年07月02日 | 阅读数:1944

close_older

Value type is number
Default value is 3600

The file input closes any files that were last read the specified timespan in seconds ago. This has different implications depending on if a file is being tailed or read. If tailing, and there is a large time gap in incoming data the file can be closed (allowing other files to be opened) but will be queued for reopening when new data is detected. If reading, the file will be closed after closed_older seconds from when the last bytes were read. The default is 1 hour
 
首先我想确认一下:read模式,是设置start_positison => "beginning"嘛?如果是,引入下面问题:
按照官方文档上说,如果是read模式,存在多个文件时,当文件最后访问时间大于 close_older时,文件将被关闭。我想问以后再进入该文件的数据是不是无效的?
已邀请:

要回复问题请先登录注册