I am using Elastic Agent 8.12.1 on a Windows host. I have a requirement to ingest logs for an application which writes them directly to a share referenced UNC path from the host (e.g., \\myshare\myapp\logs\log.json
). That share is NOT mounted as a drive and I'm not able to configure the hosts to mount it.
I'm using Elastic Agent with the Filestream integration. It does NOT appear to recognize the logs from the UNC path. In the past, I was able to do this with Filebeat directly, IIRC. I realize that it's recommended to NOT read logs from network shares, but that it will work. Is there any way to force the Filestream integration to work with a UNC path?