Hello, is it possible to modify an output and reload the config without losing
all events in main memory ?
In case of having this configuration:
Output: elasticsearch, file, tcp
Problem: Disk full, The "file output blocking" will block elasticsearch and tcp outputs ( if any output is down, all output will stall).
One solution will be to clean the disk!
But is it possible to change the file "path" to another disk and reload (not a "force-stop") the config, to avoid data loss?