Filebeat registry update

(Harvii Dent) #1


How often does the registry file get updated? is it periodic (every few minutes)? or is updated after each log line is acknowledged?


(ruflin) #2

The registrar file is written every time events are sent out and acknowledged by Logstash or Elasticsearch. How often events are sent out depends on spooler config idle_timeout and spool_size:

(system) #3