Filebeat isn’t collecting lines from a file
editFilebeat isn’t collecting lines from a file
editFilebeat might be incorrectly configured or unable to send events to the output. To resolve the issue:
-
If using modules, make sure the
var.paths
setting points to the file. If configuring an input manually, make sure thepaths
setting is correct. -
Verify that the file is not older than the value specified by
ignore_older
.ignore_older
is disable by default so this depends on the value you have set. You can change this behavior by specifying a different value forignore_older
. -
Make sure that Filebeat is able to send events to the configured output. Run Filebeat in debug mode to determine whether it’s publishing events successfully:
./filebeat -c config.yml -e -d "*"