Hi,
I'm new to ELK Stack. I have a task build a analysis log, input is .log file. I try to read the guide but I can't find out how to make Filebeat read file everyday. My file will be remove and create again at 0 am.
Thanks for any helps and sorry for my poor English.
Hi @lioaslan!
Did you try to configure Filebeat to read from your file? See https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-input-log.html#filebeat-input-log
I'm not sure if you can make it parse the file once per day, since Filebeat constantly collects logs from target log files, so if the file no longer has more log lines then Filebeat will just stop reading from it.
1 Like
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.