I do have file which may in active for long time so I cant use close_inactive option in filebeat so is there any option to disable this. inactivity time might be days so
Did you try to set the
ignore_older to a few days?
But my flebeat is stopping itself if file is inactive for longer period. So after this new events are not index because FB is auto stopped. I use fllowing command for running filebeat.
nohup ./filebeat -c filebeat.yml &
on Linux machine
no I didn't use this. Even my log file is moved to another location (other than file path pattern) daily or exceeding 50 MB size.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.