I have a problem,
I want to send logs to logstash with filebeat, i just want to send the 30 last days of logs.
The prospectors of filebeat scan 4 logs files. I just want the line in the logs files for the last 30days.
If i activate the option "ignore_older: 30d" the prospectors will look for all the log lines until 2015 in the file, because log lines are added every minute, and this option allow to ignores any files that were modified before the specified timespan.
What solutions can I use to look at log files, but send log lines for the last 30 days?