I have an application which continuously writes to a log file and locks it while it is writing the data. I need to use filebeats to get the logs from the file to ElasticSearch in Real Time. Can filebeat ship such data from such a locked file? Also does filebeat lock the files while collecting and shipping the data.
Filebeat does not lock files while reading.
Do you run your application on UNIX or Windows? Because on UNIX file locks between processes are advisory. So in that case FB can read from those locked files.
The application is running on Windows.
Filebeat will only be able to read from the file if the application writing to it has allowed shared read access to file.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.