logstash多行过滤器:消息刷新的最后一部分 [英] logstash multiline filter:last part of message flush

问题描述

在多行过滤器中存在一个已知问题，因为它仍在等待跟随模式并且没有被冲洗掉，所以它不打印被过滤的输入的最后一部分.
问题已解决吗?如果可以的话，是否有一个标签可以冲洗掉最后一部分?

There was a know issue in the multiline filter that it doesn't print the last part of input being filtered as it is still waiting for a pattern to follow and it isn't flushed out.
Has the issue been resolved. If so how?Is there a tag to flush out the last part?

推荐答案

根据此JIRA，刷新功能应该位于logstash 1.5中:enable_flush添加到了

The flushing feature is supposed to be in logstash 1.5 according to this JIRA: https://logstash.jira.com/browse/LOGSTASH-1785 although an "experimental" feature of 1.4.2 added enable_flush to the multiline filter. I have not personally tested to see if that fixes the flushing issue with the last event.

这篇关于logstash多行过滤器:消息刷新的最后一部分的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！