We have Nlogs getting dumped to a folder, which is being monitored by Filebeat. And logs are getting rotated in two cases : 1. If the log file has reached 25MB or time has crossed an hour. In Kibana, we are using source field for identifying the source of log events, what I see if the original log file, which will be rotated and renamed to a different later. Hence, we always have different log file names as part of source, Is there any way to get the rotated or new file name as source field?
Hi @ashwin_s and welcome to discuss 
The file name appearing in the event is always going to be the original file from where the log was read by filebeat. If the file is later rotated events are not going to change.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.