Log rotate introduced blank offset entry in registry


I noticed that when Filebeat detected a log rotation, it will create a new entry in registry. I discovered that the new entry will have blank offset. An example of the rotated log entry from my registry file (I expanded the JSON):


If Filebeat were to restart it will then reprocess the file from the beginning.

Is this a known design?

Thanks for the advice.

This is a know issue and was fixed in the 1.2.3 release today: https://www.elastic.co/guide/en/beats/libbeat/current/release-notes-1.2.3.html

Thanks for reporting it.

Thanks ruflin! I have tested and confirmed that 1.2.3 fixed the missing offset of rotated log entry.

Good to hear. Thanks for testing.