Filebeat module ignore_older

How can I add the ignore_older option to filebeat modules?

hey @rugenl
you can try to define a processor combined with range query
processor you might be interested in:

you will then specify a condition as a range condition and specify timespan lower than a value


        lte: "now-1d/d"

Check this for how date math is used:

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.