Hi All,
We are having some issues with filbeat. Actually filebeat is locking a logs file and because of this the log rotation is not working. The data is keep getting ingested in the same file.
Every time we have to restart the filebeat service, so the file can be rotated.
As per the given suggestion we have used close_removed and close_renamed these two config in yml file, however, it still not working
On Windows, you might have problems renaming or removing files because Filebeat keeps the file handlers open. This can lead to issues with the file rotating system. To avoid this issue, you can use the close_removed and close_renamed options together.
We are using filebeat 7.1 version
