Filebeat over a shared network

Elastic Stack Beats
1

Hi,

I have a setup with 5 machines (5 pc's) that makes their own logfiles.
All those 5 machines are connected to one (another) PC that runs filebeat.
Filebeat processes all logfiles from the 5 machines but when I restart one of the five machines filebeat processes all old logs again.

Is there any work around for this because they doesn't recommend to use filebeat on a shared network ?
Is filebeat working on this issue ?

Regards

2

Welcome to our community! :smiley:

Do you mean that you have Filebeat accessing the files over a network share?

3

Yes that’s correct.

4

Ok, you may want to read filestream input | Filebeat Reference [8.3] | Elastic

5

Hi,

I already tried with this added in filebeat input but without success.

file_identity.path: ~

Do I need do to something else ?

Regards