Filebeat registory


(Suhas) #1

Hi,

I'm using a file beat to read the log file on daily basis,

My prospector file looks like this

#=========================== Filebeat prospectors =============================
filebeat.prospectors:

- type: log

  # Change to true to enable this prospector configuration.
  enabled: true

  paths:
    - /app/logs/webServer/Application.log

  #use regular expression
  exclude_files: [".gz$|.zip$|.7z$"]

Every day at midnight the log file is rotated, old file is saved with the date and the new log is being generated with the same name Application.log

Will the prospector treat the file as new and harvest the file with the same name. If yes, will it effect my data ?
Will the harvester miss out any log lines ?

Regards :tiger: