How to prevent a duplcation of collecting logs

Hi, everyone

I'm using an aws integration on elastic agent to gather logs from aws cloudwatch

  • start position is "beginning"(default value)

When a server where an aws integration is installed downs for a while and starts up later ,
aws integreation always gathers log from beginning position on cloud-watch log group

  • I know what's start position, how to run in case of "beginning" or "end"

I'm aware that if agent stops and starts after for a while,
"beginning position" runs from the last time when it collects log normally

I'm wondering the solution that it's getting logs from the last posiiton where agent normally gathers log before server downs

  • I don't wanna set start postion to "end". it might lose data for down periods

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.