I'm collecting a number of logs, and some of them are rotated through logrotate with
delaycompress option (file is renamed but sits there for 24h). Those files are collected and opened by filebeat, but it never closes them.
I know I can reconfigure
close_inactive files, but alas this happens to modules. And I don't see any clear way to set defaults to all modules at once.
Is there a way to set defaults for all
log instances or is there any other way to make filebeat stop waiting on removed files?
Thanks in advance.