Lumberjack only follows the first of multiple files listed about logstash-forwarder

[jordansissel]

The latest lumberjack uses a config file for determining which paths to watch. I recommend you upgrade :)

[boinger]

I think I actually have the latest -- it wasn't clear what CLI flag told it to read the config file (based on lumberjack.sh -h) and the README didn't help, either.

But I'll dig around and figure it out -- thanks!

[jordansissel]

well, the latest version doesn't support any of the flags you're mentioning and should abort ;)

% build/bin/lumberjack -h
Usage of build/bin/lumberjack:
  -config="": The config file to load
  -cpuprofile="": write cpu profile to file
  -idle-flush-time=5s: Maximum time to wait for a full spool before flushing anyway
  -log-to-syslog=false: Log to syslog instead of stdout
  -spool-size=1024: Maximum number of events to spool before a flush is forced.

[jordansissel]

Sorry for the confusion :)

[jordansissel]

I think this bug was for the C version of lumberjack, lsf is now in Go; I'm not sure it's affected anymore. Please reopen if you're still hitting this in the newer logstash-forwarder.