I am a newbie, I am running Filebeat in my application server, to transfer log files to logstash server. My Application server creates new log files once in every 3 minutes 24x7 (i.e., 480 files per day). These files are once written files, so once harvested these files can be removed from the filebeat registry. I can't use "ignore_older", because sometimes the application server may not be able to connect logstash server for more than 2 or 3 days. But once connected, these files has to be harvested (transferred to logstash server). What settings I have to use? Can anyone please help me. Thanks in advance..
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.