Is ignore_older config option similar to dead_timeout option in logstash forwarder


(vinay gupta) #1

Hi

I want to tail all the files in a dir, which can have upwards of 5000 files added per hour.
I want to close the FD for the files that are not update in last 1/2 hour but there may be a case where older file can get updated after 2hrs. In that scenario we would like get the updates.

Thanks
Vinay


(Steffen Siering) #2

ignore_older was derived from dead_timeout. I think it should fit your use-case.


(Steffen Siering) #3

There's a follow up discussion on the config and potential other config options to be introduced in the future: https://github.com/elastic/filebeat/issues/181


(system) #4