Issues with log rotation - Filebeat lock logs file

Hi All,

We are having some issues with filbeat. Actually filebeat is locking a logs file and because of this the log rotation is not working. The data is keep getting ingested in the same file.

Every time we have to restart the filebeat service, so the file can be rotated.

As per the given suggestion we have used close_removed and close_renamed these two config in yml file, however, it still not working

On Windows, you might have problems renaming or removing files because Filebeat keeps the file handlers open. This can lead to issues with the file rotating system. To avoid this issue, you can use the close_removed and close_renamed options together.

We are using filebeat 7.1 version

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.