Hi, I run ELK on Linux(CentOS7). I know in Logstash we could add sincedb_path => "/dev/null" in config/logstash.conf, so we could read same file again and again. How to do this in filebeat?

The data that keeps track of what files have been loaded is contained in ./data/registry/filebeat you can delete the entire data directory (do not do in production) or go into the./data/registry/filebeat/data.json file and remove the entry you are interested in. There is not a parameter to force r…

Discuss the Elastic Stack

How to read same file multiple times in Filebeat?

Elastic Stack Beats

Daniel6 August 5, 2019, 7:45am 3

Hi stephenb,
Thanks for your explanation.
It's really helpful to me.
Thank You!

Topic		Replies	Views
Retriving to read the same file Beats filebeat	4	590	April 30, 2018
Filebeat not reading the already processed log file again Beats filebeat	3	1592	May 17, 2019
Why Logstash reload the same data many times? Logstash	3	1025	December 6, 2017
Read the same file several times Beats filebeat	4	2386	April 3, 2017
How do I reset the "file pointer" in filebeats Beats	3	24150	July 5, 2017

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

How to read same file multiple times in Filebeat?

Related topics