Why do you care about the filename? The sincedb tracks files using the inode and device numbers. If a file is renamed from foo.log to foo.log.1 these do not change, so the input will know not to re-read it just because it has been rotated. There are issues with the sincedb, but I do not think this is one of them.