Hi All, I have configured ignore_older into filebeat [version 6.6] so that only new logs should push into ELK, here is the ignore_older and other related configs: ignore_older: 1h close_older: 24h close_inactive: 30m Keep getting the below logs till the log files are not older [<1h]: 2020-0…

Ignore_older is not pushing the latest logs

shaunak (Shaunak Kashyap) July 9, 2020, 6:51pm 6

Is there a network-mounted folder inside /var/logs? Also what does find /var/log -mtime -24h return?

Topic		Replies	Views
Filebeat won't send files cause ignore_older reached Beats filebeat	4	1241	February 8, 2017
Dynamic date files input to Filebeat Beats filebeat	8	5570	July 29, 2019
Ignore_older Beats	2	1964	July 5, 2017
File beat monitor only recent log files Beats filebeat	9	2588	June 30, 2016
Filebeat is not sending logs due to ignore_older Beats filebeat	7	2961	August 16, 2019

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Ignore_older is not pushing the latest logs

Related topics