Losing logs in ELK

warkolm · June 9, 2021, 12:26am

devopscanada:

Harvester could not be started on new file: ... Err: error setting up harvester: Harvester setup failed. Unexpected file opening error: file info is not identical with opened file. Aborting harvesting and retrying file later again

These seem pretty relevant.
Can you enable debug on one Filebeat pod and provide more logging?

Topic		Replies	Views
Throttling processing of log backfill using Filebeat Beats	11	3498	May 17, 2017
Performance weird stuff Elasticsearch	13	874	September 25, 2020
Elasticagent - filebeat is still increasing memory Beats	4	619	January 30, 2024
Elasticsearch Cluster Timeouts Elasticsearch	14	2560	September 14, 2018
Missing some logs Elasticsearch	4	172	June 23, 2024

Losing logs in ELK

Related Topics