I am planning to use the filebeat to collect logs. All the logs will be rotated using logrotate command for linux Reading the posts I understood that filebeat keeps track of data by inode.
However, if the logs are rotated using compress mode , I assume specifying the path in the prospectors as message* is not a good idea.
filebeat.prospectors: - input_type: log paths: - /var/log/messages*
Is there any specific combination of configuration options which I need to specify for my case?