Filebeat configuration in main config or seperate?

Elastic Stack Beats
1

Hello there,

we want to use the "close_renamed: true" option for our filebeat. Im currently asking myself if I could set it "globally" in the filebeat.yml (so every config in conf.d is affected) or do I have to set it seperatly in every config file in conf.d?

Thanks and best regards

2

Sorry do you mean every config in modules.d? I don't think so. I think you can set close_renamed: true once in filebeat.yml under log input.