Hello.
I have a problem. I have upgraded my cluster to 8.10.4 all together with filebeats.
I have added new logs for 1 server. filebeat.yml contains over 40 input sections with multiline configuration, tags etc.
When i try to start sending files to logstash i have a big problem:
My filebeat starts to send old files and new files. After few minutes of work and sending randomly some old logs and new ones stops reading old files and locks down only on new coming logs.
I have try so many options and still it does that. Logstash logs clean, filebeat indecates some LOCK on file problems but after few minutes it starts work smothly. I have try to set
scan.sort: modtime
scan.order: asc
harvester_limit: 1
one time works other not. What could be a reason for that ?