Any way to set defaults to all filebeat modules?

Elastic Stack Beats
1

Hello.

I'm collecting a number of logs, and some of them are rotated through logrotate with delaycompress option (file is renamed but sits there for 24h). Those files are collected and opened by filebeat, but it never closes them.

I know I can reconfigure log to close_inactive files, but alas this happens to modules. And I don't see any clear way to set defaults to all modules at once.

Is there a way to set defaults for all log instances or is there any other way to make filebeat stop waiting on removed files?

Thanks in advance.

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.