Hello
I'm running into a problem with filebeat, an access denied. I have a directory located on c:\DIR1\DIR2\LOG_DIR, LOG_DIR contains the log files which are read by filebeat using a filestream glob. The user running filebeat has only access to that folder and all it's contents, it has no rights to DIR1 or DIR2. When I run filebeat it can query the files and find all the matching logs but then it throws an exception :
2022-10-20T10:55:02.079+0200 DEBUG [registrar] registrar/registrar.go:140 Starting Registrar
2022-10-20T10:55:02.079+0200 DEBUG [scanner] filestream/fswatch.go:277 recursive glob enabled
2022-10-20T10:55:02.080+0200 DEBUG [scanner] filestream/fswatch.go:367 finding path to original file has failed C:\DIR1\DIR2\LOG_DIR\log-API-20220923.json: CreateFile C:\DIR1: Access is denied.
2022-10-20T10:55:02.080+0200 DEBUG [scanner] filestream/fswatch.go:367 finding path to original file has failed C:\DIR1\DIR2\LOG_DIR\log-API-20220927.json: CreateFile C:\DIR1: Access is denied.
2022-10-20T10:55:02.080+0200 DEBUG [scanner] filestream/fswatch.go:367 finding path to original file has failed C:\DIR1\DIR2\LOG_DIR\\log-API-20220928.json: CreateFile C:\DIR1: Access is denied.
It seems that there is a check that will look for symlinks, but this causes it to query directories where it doesn't have the permissions for.
Is there a way to instruct filebeat to skip this check and just get on with parsing the file it found ?
Cheers