How to disable logrotate?

[voelzmo]

Hi,

Following the documentation at https://www.elastic.co/guide/en/beats/packetbeat/master/configuration-logging.html I was looking for a way to disable logrotate. Is that even possible at all? How well would packetbeat deal with an external logrotate mechanism?

My reason is: The logfiles within my distributed system sit by convention in a specific directory. There is already logrotate.d configured for that directory, I don't want another entity manage the logs specifically for packetbeat.

Thanks for your advice!
Warm regards
Marco

[ruflin]

Currently this is not possible. I agree that we should offer an option to disable this (or even make it optional). Could you open an enhancement request for this on Github? https://github.com/elastic/beats

[voelzmo]

sure, here you go: https://github.com/elastic/beats/issues/2764