Can't configure filebeat to only send new added log content

Elastic Stack Beats
1

I used filebeat to connect to Kafka.
Everytime I add some new lines to the log file, I want filebeat only output this contents to Kafka.
My Input of filebeat.yml as below:
filebeat.inputs:

  • type: log
    enabled: true
    paths:
    • /Users/ll/Documents/test06.log
      tail_files: true

And I Start filebeat using below command:

brew services start elastic/tap/filebeat-full
cd /usr/local/etc/filebeat/
filebeat -e -c filebeat.yml -d "publish"

2

Please do not open multiple threads about the same issue. I responded to the other thread.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.