On pfSense 2.2 (32-bit), filebeat will only read the log files once when it starts up. It appears everything works correctly for the first read -- everything reaches the stack like I expect. After that, no additional logs ever come, just these entries in filebeat's own logging output:
2016/08/19 15:25:04.118205 logp.go:223: INFO No non-zero metrics in the last 30s 2016/08/19 15:25:34.075001 logp.go:223: INFO No non-zero metrics in the last 30s 2016/08/19 15:26:04.075166 logp.go:223: INFO No non-zero metrics in the last 30s etc.
These are busy logs, so this shouldn't be happening. These are also normal linear, ascii logs. Not the pfsense binary, circular system logs. So no issues, there.
I have been using binaries from https://beats-nightlies.s3.amazonaws.com/index.html?prefix=jenkins/filebeat/ -- which might be related. I couldn't find any "stable version" binaries for freebsd-386.
What can I do?