search

driskell / log-courier

The Log Courier Suite is a set of lightweight tools created to ship and process log files speedily and securely, with low resource usage, to Elasticsearch or Logstash instances.
Other
419 stars 107 forks source link

log-courier 2.0.4 seems to hold back last message in log #344

Closed PMDubuc closed 8 years ago

PMDubuc commented 8 years ago

I set up log-courier to ship messages from a log file that hasn't been updated in a few days. It shipped all but the last message. I think it might be because it's using the multiline codec. All the messages in the file are single line. Could it be holding on to the last message waiting for another line to determine if it's a multline message? Isn't there a timeout that should flush the last message at a certain point? I'm not setting the "spool timeout". The documentation I have says that the default value is 5 (seconds I assume).

PMDubuc commented 8 years ago

Nevermind. Sorry. I just saw that I need to use the "previous timeout" option on the multiline codec.