hi,
These are my filebeat configuration:
filebeat.inputs:
- type: log
paths:
- /var/log/file1.log
- /var/log/file2.log
output.file:
path: "/var/log/"
filename: "all.log"
permissions: 0644
rotate_every_kb: 20000
number_of_files: 2
processors:
- drop_fields:
fields: ["fileset.name", "read_timestamp", "input.type", "log.offset", "log.source.address", "agent.ephemeral_id", "agent.name", "agent.type", "agent.version", "ecs.version", "host.name", "fileset.name", "stream", "beat.hostname", "beat.name"]
pb :
1 - set permissionss doesn't work
2 - other process can't read output file, because the permissions don't change (600) !!
I have read several topic, so filebeat has default umask => 0027 , so all files created will have '0640' permissions
is there any way to solve pb pls ?