Filebeat input rotation file

Elastic Stack Beats
1

Can a filebeat read a rotating file without missing or duplicate data ?

example...

file list
log_file1
log_file2

When log_file1 is full, it writes data to log_file2.
When log_file2 is full, it writes data to log_file1 again.

When rereading log_file1 from filebeat, the data is duplicated by reading the log twice.
What settings should I add, can I fix this?

Here is my filebeat.yml

filebeat.inputs:

  • type: log
    enabled: true
    paths:
    • C:\log_file1.txt
    • C:\log_file2.txt
2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.