Filebeat: Read the whole file every X regardless if it has changed or not


(Elvar) #1

I have a few "state" files that change every now and then but I would like Filebeat to read each file either when it changes or every X, and not just read the latest line but read the whole file.

What complicates things is that sometimes the file contains two lines and sometimes one line so I have to use the multiline filter as well.

What is the best way to go about doing this?


(system) #2

This topic was automatically closed after 21 days. New replies are no longer allowed.