Hi, I have the following question/problem: is there a way to stop exporting/propagating logs (either by filebeat or logstash) after the log file reaches a certain size limit? Asking because recently faced an issue caused by a bug in app code that generated a huge number of duplicated/useless log messages and the log file reached 100G limit. I understand that the issue in the app must be fixed in the first place, but still curious: is it possible to make Filebeat stop processing a log file if the file reaches a certain size? And, if FB is just installed and is going to start processing existing "large" log files, can it ignore the too big files even if they match the input? Thanks in advance.
Any help and suggestions are highly appreciated!
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.