Unable exclude files

Elastic Stack Beats
1

Hi, i using Filebeat 6.5.4, below is my filebeat content, the problem is those path stated in the "exclude files" are not being ignore, the filebeat still pick up the files under those path, any advise ?

/opt/apps/logs/cron/ /.log. *
/opt/apps/logs/tcollector/tcollector.log
/opt/apps/logs/wlstats/wlstats- * . *
/opt/apps/logs/*/weblogic/ *.log

=============================================================

filebeat.inputs:
-type: log
enabled: true
paths:
-/opt/apps/logs// * / * .log
-/opt/apps/logs// * / * . log. *
-/opt/apps/logs// * / * / * . log
-/opt/apps/logs// * / * / * . log.*
-/opt/apps/logs// * / * / * / * .log
-/opt/apps/logs// * / * / * / * .log.*

exclude_files: ['.gz$', '.zip$', '.tar$' , '.tgz$' , '.lck$', '.bz2$', '/opt/apps/logs/cron/* /.log. '/opt/apps/logs/*/weblogic/ *.log']
fields:
env: prod
tail_files: true
tags: ["websys","weblogic"]

setup.kibana:

output.logstash:
hosts: ["abc1:5044","def2:5044","ghi3:5044"]
loadbalance: true

logging.level: info
logging.to_files: true
logging.files:
path: /opt/apps/filebeat/logs
name: filebeat-logs
keepfiles: 7

processors:

  • add_host_metadata: ~
  • add_cloud_metadata: ~
2

much appreciate if any help/advise

3

Please don't post pictures of text, they are difficult to read and some people may not be even able to see them :slight_smile:

Please also format your code/logs/config using the </> button, or markdown style back ticks. It helps to make things easy to read which helps us help you :slight_smile:

4

noted, thanks

5

the "exclude files" option will accept path with wildcard ?

eg. '/opt/apps/logs/*/weblogic/ *.log'

6

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.