Filestream and sequencing

Elastic Stack Beats
1

Hi. Lets say that I've got log directory full of old files;
data_20230301.log
data_20230402.log
..
data_20230329.log
and so on.

Is it somehow possible to configure filestream input so that these files are read/processed in sequence? (Meaning first read data_20230301.log in sequence and then proceed to data_20230402.log..)

2

So I'm guessing the proper way to do is to use harvester_limit to 1 and play around with close_timeout.

Also it seems that there is a bug? with filestream and harvester_limits so old log input works better.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.