Question about parsed files

Elastic Stack Beats
1

Quite simple:

If I configure a bunch of log files as paths and I apply that config to a diverse set of servers (so some servers will not have some of those log files) will that affect performance or anything?

Lets say I have a tomcat server and a rabbit server and I create a filbeat config that will be common for the 2 servers so I will configure both log files in that config.

What is filebeat doing if it doesn't find a file that was configured?

2

If a file is not present, then fielbeat will do nothing for that input, it will simple ignore it and wait until the file is created in the path, this has no impact in performance.

It is a pretty common use case.

For example, I had a use case on the past where I needed to collect logs from custom internal applications, but not all servers would have all the applications, so I used externa configuration files and deployed these files in all the servers.

If an application and its log exist in the server, filebeat would collect it.

1 Like
3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.