Filebeat: read allways from beginning, even if no update


when developing new filters usually do it locally on my machine. In my current setup I allways need to add new lines to a sample logfile.

Is it also possible to configure filebeat this way, that it ships the configured file each time from beginning, when I start filebeat? And without the need to change the file to trigger the shipping?
Restarting filebeat on each iteration would be slightly more convenient for me than adding new lines to the logfile.

Thanks, Andreas


filebeat remembers the state of files it has visited, you can reset that by removing data/registry file, that should cause filebeat to send everything over again (good for testing)

1 Like

This topic was automatically closed after 21 days. New replies are no longer allowed.