Добрый день, подскажите пожалуйста, как заставить Filebeat проиндексировать старые события в логе? Спасибо!
You need to stop the Filebeat service, then delete the registry file which is where Filebeat persists its state. The registry is stored in /var/lib/filebeat/registry by default. Then restart Filebeat and it will read any logs from the beginning.