Possible to Control Order that Beats Processes and Ships Files/Log Lines?

Elastic Stack Beats
1

I am using Beats to ship entries from log files to Logstash. I have aggregations in Logstash that are order dependent. I cannot seem to find a way to control the order that Beats processes my log files or the individual entries within the log files. Is this even possible or should I think of a new way to accomplish my task?

2

Did you see the note about setting workers to 1?

3

Yes I am using this setting in Logstash. When I do not use Beats to ship and just read from filepath in Logstash file input, the order is good. When I use Beats as input, the order is changed on some entries. Is there a similar setting to control the order in Beats?

4

What does your filebeat config look like?

5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.