I am having a Status-Logfile, that changes periodically (every minute). The problem is, that mostly only content of the file changes (timestamps, some numbers) and the size of the file stays the same. I am having trouble configuring the filebeat to read this file, as the harvesting is mostly triggered by the file size changes.
I was trying settings like:
scan_frequency, close_eof, tail_on_rotate , but no success.
Would it be possible to configure filebeat to act based on file modification time, rather then file size? If yes, how?
I will appreciate any kind of help.