Logstash：最简单的管道可能不工作

在Ubuntu 16.04上使用

logstash2.4

（我有我的理由）

root@logbox:/etc/logstash/conf.d# ls -al
total 16
drwxrwxr-x 2 root root 4096 Nov  2 19:53 .
drwxrwxr-x 3 root root 4096 Nov  2 15:46 ..
-rwxrwxrwx 1 root root  277 Nov  2 19:52 01_01_input.conf
-rwxrwxrwx 1 root root  604 Nov  2 19:48 03_02_output_pa_http.conf


root@logbox:/etc/logstash/conf.d# cat *.conf

input {

  stdin {}

  file {
    path => "/usr/share/logstash/files/production_input.txt"
    start_position => "beginning"
    # codec => plain { charset => "ISO-8859-1" }
    codec => json
    # add_field => [ 'redis_db', '10' ]
  }



}
output {

  stdout {}

}


root@logbox:/etc/logstash/conf.d# ls -al /usr/share/logstash/files/production_input.txt
-rwxrwxrwx 1 root root 11910 Nov  2 16:09 /usr/share/logstash/files/production_input.txt

然而

vagrant@logbox:/etc/logstash/conf.d$ sudo tail -f /var/log/logstash/logstash*


Sending logstash logs to /var/log/logstash/logstash.log.

==> /var/log/logstash/logstash.log <==
{:timestamp=>"2018-11-02T19:59:52.947000+0000", :message=>"Pipeline main started"}

==> /var/log/logstash/logstash.stdout <==
{:timestamp=>"2018-11-02T19:59:52.947000+0000", :message=>"Pipeline main started"}

vagrant@logbox：/etc/logstash/conf.d$sudo tail-f/var/log/logstash/logstash*
将logstash日志发送到/var/log/logstash/logstash.log。
==>/var/log/logstash/logstash.log“2018-11-02T19:59:52.947000+0000”，消息=>“管道主管道已启动”}
==>/var/log/logstash/logstash.stdout“2018-11-02T19:59:52.947000+0000”，“消息=>“管道主管道已启动”}

该文件没有以标准格式打印。

stdout

…我已经尝试了两种编解码器（

json

和

plain

）

编辑：实际上可能是文件只被读取了一次；这与sincedb的

有关吗？
我如何强迫logstash再次阅读？
start\u position=>start
不够吗？
第一次读取文件时使用
start\u position

如果要强制logstash再次读取，则需要在文件输入插件conf中添加以下参数：
sincedb\u path=>“/dev/null”

请阅读此内容以获得进一步解释
您是否尝试过
stdout{codec=>rubydebug}
？