Read from the beginning filebeat

Elastic Stack Beats
1

hello!

Is there any parameter to tell an input in filebeat to read from the beginning of the document?
like the start_position => beginnig of logstash

Thank you!

2

Hello! Which input are you looking at to use?

3

Hello!

i want to "delete" or omit de registry from a log or filestream input without delete the registry of the rest with a parameter or something similar like the start_position => beginnig of logstash

Thank you!

4

Filebeat already read files from the beginning, it is the default behaviour.

If you want to read the same file again, then you need to change the registry, the same thing applies to logstash, the start_position only matters for the first time logstash reads the file.

5

but what happens if i have mores than one input?

i've been collecting logs from other paths , is there one registry per input ?
if i delete de registry it affects to the others inputs?

6

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.