Log tailing can be a useful source of enrichment information to be fed back into the Trisul streaming pipeline. It can be a little tricky to get right with LUA. Here is a technique that works with low volume 100s/events/second log entries.

Working example : strelka-json.lua