We were getting Error in our shipper logstash as ” No such file or directory – /usr/share/logstash/run/tagit2-logstash-oradb-current.lastrun ” As checked , /run directory was unable to create in logstash folder .So we have manually created, after which the error got resolved.
If we are capturing the last run time , are we sending the data to any of the index or in any visualisation.?
Can we comment the lastrun line and then run the logstash conf file ?
ANS - The parent folder of the last_run timestamp file mentioned in the config should exist. The last_run_timestamp is not sent to any index. Its maintained in the file and we can only check the file if its getting updated correctly on each run.