I'm using a file beat to read the log file on daily basis,
My prospector file looks like this
#=========================== Filebeat prospectors ============================= filebeat.prospectors: - type: log # Change to true to enable this prospector configuration. enabled: true paths: - /app/logs/webServer/Application.log #use regular expression exclude_files: [".gz$|.zip$|.7z$"]
Every day at midnight the log file is rotated, old file is saved with the date and the new log is being generated with the same name Application.log
Will the prospector treat the file as new and harvest the file with the same name. If yes, will it effect my data ?
Will the harvester miss out any log lines ?