Filebeat path glob support

Elastic Stack Beats
1

According to the docs:
https://www.elastic.co/guide/en/logstash/6.7/glob-support.html

It looks like there's some glob support for paths. However, a glob pattern I've written doesn't seem to be getting used by filebeat (the log file doesn't show harvesters for any of the existing files):

This is the pattern:
+([0-9_]).SecurityCheckAndDbAccess.log*([.0-9])

It tests fine on globtester, so I thought I'd ask here in case I'm missing something obvious. Is glob support only partial?

2

Your glob doesn’t appear valid for filebeat, it also doesn’t appear to be valid for logstash.

For filebeat the important info is here:
https://golang.org/pkg/path/filepath/#Match

For logstash I’m unsure what the authority is but the doc you reference doesn’t document the pattern you described as valid either.

3

Ah, looks like the parenthesis stuff I was using is "extended" glob:
https://www.gnu.org/software/bash/manual/html_node/Pattern-Matching.html

I'll use exclude_files to work around this.

4

hehe, you’re in for a treat, that doesn’t exists :wink:
It’s for lines, not files.

Maybe there is another way, with only globs. I don’t how your files are named and managed.

5

lol MY bad.. it does, I had never looked at it before :wink:

6

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.