Filebeat log ingestion and scan frequency

Elastic Stack Beats
1

Hi Expert and Team,

Could you please help me with the log ingestion from filebeat.There are two scenarios

1)My logs are created in 15 minutes frequency in the same name and replace the older one.what should my .yml file should be ??
as the older one gets deleted with new one what time setting should I use??

2)To avoid the above setting I am renaming the file with timestamp and keeping files of 1 day(which costing me disk spaces though)..but problem whenever a new file is getting creating it starts harvesting the newly created one and stop harvesting the older ones(including the one it is already harvesting).

Any help will be welcome..thanks in advance.

Regards,
Moksha

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.