Help in resetting filebeat registry to reread in log files

Elastic Stack Beats
1

Hello, does anyone know how to reset the filebeat registry so I can reread in existing log files. This is for testing purposes... This is for filebeat version 8.10.4. I tried deleting the files in /var/lib/filebeat/registry/filebeat but then then filebeat would not start?? Thx

root@dev-ubuntu-200403-gui-vm-3:/var/lib/filebeat# tree
.
├── filebeat.lock
├── meta.json
└── registry
    └── filebeat
        ├── 4668122.json
        ├── active.dat
        ├── log.json
        └── meta.json

2 directories, 6 files
root@dev-ubuntu-200403-gui-vm-3:/var/lib/filebeat#

Blockquote

2

Got this working by removing the following directory and all files below it.
rm -rf /var/lib/filebeat/registry

3

Only need to remove log.json

4

Ok. Thx. I'll try that next.

5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.