I need to upgrade my Filebeat from6.4.1 to 7.4.0. But the upgrade process requires to shut down the beats process. Is there any way that the logs for the time beats is down be served to Logstash.? I mean no loss of logs.
Please read here: https://www.elastic.co/guide/en/beats/libbeat/7.4/upgrading-6-to-7.html
there is an asset called registry that should be tracking the logs and offset for each file being harvested, there shouldn't be any log loss
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.