Hi using Filebeat 6.2.2 and logrotate.
Logrotate is setup to rotate every 100MB.
When rotation happens we see that the last entry durring rotation gets cut in half. So some of the bytes of the line are in the old file and the rest in the new file.
This single line gets indexed as 2 separate events in ES.
Is there a way to fix this?