Logstash 跟踪日志文件未注册事件（带有-tail=true的日志存储转发器）

我只想从logstash forwarder将新创建的日志转发到logstash服务器 我有一个logstash-forwarder.conf文件

我想知道是否有像start\u position=>end这样的选项添加到这个配置文件中。 在运行logstash转发器时，我还尝试使用-tail=true。它会拍摄快照，但harvest似乎不会记录事件。它只在没有-tail命令行选项的情况下注册事件，或者在给定-tail=false时注册事件，这将从一开始转发所有日志

{

  "network": {
    "servers": [ "X.X.X.X:5001" ],
    "ssl certificate": "/etc/ssl/certs/logstash-forwarder.crt",
    "ssl key": "/etc/ssl/private/logstash-forwarder.key",
    "ssl ca": "/etc/ssl/certs/logstash-forwarder.crt",
    "timeout": 300
 },

  # The list of files configurations
  "files": [
                {
                    "paths": [ "/home/user/Programs/zookeeperlog.log" ],
                    "fields": { "logtype": "zookeeper-log", "type": "logs"  }
                },
                {
                    "paths": [ "/var/log/syslog" ],
                    "fields": { "logtype": "kafka-log", "type": "logs"  }
                },
                {
                    "paths": [ "/var/log/syslog" ],
                    "fields": { "logtype": "storm-log", "type": "logs"  }
                }

    ]
}