Ask questions. Get answers. Find technical product solutions from passionate experts in the NXLog community.

How to add a field for the file offset?
We are pushing logs from file with the im_file module to logstash and then to elasticsearch. However, some of these logs only have second accuracy, and therefore not returned in order by elasticsearch when sorted by just the time. To get around this problem, we would like to add the position of the log event to a field that we store (for example beginning line number or byte offset within the source file). Is there a way I can add a separate field for this in the events pushed by nxlog, either in the input or output configuration?

scalesleaf created
Replies: 1
View post »
last updated