Although managing lifecycle of log files is not the responsibility of Filebeat I can see the value in reacting to some events.
That is not possible with a module only, some logic at the harvester needs to trigger an event. Can you please open an Enhancement Request explaining the scenario so the team can consider it?
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.