I'm trying to collect logs from a windows path with filebeat with filestream as input like so:
--- # vim:ft=yaml - type: filestream paths: - 'C:\Users\*\some\other\folders\*.json' fields_under_root: true ignore_older: 30m close_older: 1h scan_frequency: 10s parsers: - ndjson: keys_under_root: true expand_keys: true
For some reason, this isn't working, though. I think that is because the path is in quotation marks, so the '' isn't seen as regex, but just as a ''.
Is there any workaround or might the reason be something else?
I guess escaping every backslash could work, but I didn't try this, yet.