Hi guys, i have an easy question for you but i could not find my answer 
i was using logstash without filebeat and when i insert log it could load with sincedb_path when logstash is not working but now filebeat is send data live i mean while filebeat send the data and if my logstash did not working i cannot get data after start logstash. Is there any solution for filebeat like sincedb_path ?
It depends on the input type, but if you're using a log input in filebeat then it should already be restarting from its most recent position. If this isn't happening, could you share your filebeat and logstash configuration files, and an example of what's going wrong?
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.