logstash-input-file
logstash-input-file copied to clipboard
Add option to close renamed/removed files
ATM logstash has a signle close options: close_older.
It could be useful to also have close_renamed and close_removed flags (like filebeat ).
These options would be very useful to enforce closure of pending files, expecially the close_removed. Also this would be a good alignment with filebeat.
I know that filebeat could be used instead of logstash-input-file, but when someone has to collect logs from the same host (which is running logstash) its a waste to have filebeat to ships logs locally.