Filebeat AWS module ignore older

Elastic Stack Beats
,
1

Hello,

I am using Filebeat 7.16.2 with AWS module to download VPC flow logs to elastics from S3. Is there a way to make ignore older files/log. Everytime filebeat gets restarted it writes to elastic everything from the bucket. The company policy we have is to have the log for 30 days in the bucket and it becomes a mess.

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.