I'm running into some issues with logs I'm shipping with filebeat to logstash. I'm not quite sure what the issue is, but the file with the logs only refreshes once a day or once every two days with one or two lines that I want to send to Logstash.
Data is flowing in on occasion, but usually a day or so late. So the connection works, but it just doesn't seem to work well if the logs are not flowing constantly -- I have another log file on the same machine with the same filebeat that is constantly being appended to and that one is flowing to logstash just fine. Is there some filebeat setting I need to explicitly set in this situation where the log file isn't constantly being appended to? My filebeat is:
- type: log tags: ["test"] # Change to true to enable this input configuration. enabled: true # clean_inactive: 15s # ignore_older: 8s # scan_frequency: 1s # close_timeout: 10s - C:\Elastic\logs\test.log
As you can tell it's from a windows machine