Filebeat doesn't read file after rotation

Elastic Stack Beats
1

I am running Filebeat 7.0.0, and when trying to read a log, the file stops getting read after it rotates.
The file rotates by copying the contents of "errorlog.log" to "errorlog.1.log" and then emptying "errorlog.log". The file isn't deleted, just emptied, which can be seen as the create date is in 2014, but last modified is today.

When the rotation occurs, Filebeat doesn't detect anything in the newly empty log file, and never updates again. Is there a way to change Filebeat's behavior around detecting a change in a file?

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.