Hi All, On Windows, my filebeat.yml is set to ignore older than 24h, yet when I am running filebeat today, it is actually showing IIS logs from back in May. The IIS logs are configured to rollover each day, so I'm not sure what is causing this. Any thoughts? To further clarify, Kibana only shows…

Filebeat showing logs older than 24 hrs

ruflin (ruflin) June 15, 2016, 6:10am 5

Are these two posts related / the same? Filebeat Windows Config Help (filebeat.yml)

Topic		Replies	Views
Filebeat Windows Config Help (filebeat.yml) Beats	14	16411	July 4, 2016
Filebeat can't get the older iis files Beats filebeat	1	265	July 26, 2020
How does filebeat traverse a path Beats filebeat	2	1481	September 30, 2017
Filebeat running but now showing iis logs in elasticsearch Beats filebeat	6	369	December 7, 2021
Regarding ignore fieds Beats filebeat	10	250	December 1, 2022

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Filebeat showing logs older than 24 hrs

Related topics