Logbeat started reading very much old files as well when mount point is placed

Logbeat started reading very much old files as well when mount point is placed

Question:
In RBL, for a given case, the mount point got removed where logs are updating. Now when mount point is placed logbeat started reading very much old files as well. How can we exclude old files? 


Answer:
ignore_older argument is available in logbeat.

    • Related Articles

    • Logbeat is not able to read old logs 361

           Solution Document      Logbeat is not able to read old logs         Overview General/Customer specific General Author Rasika Puranik Reviewer Seema Approver Deepak G Release date 08/07/2022 Product Version 8.X and 7.X     Audience: ...

    • NFS Mount Point Disk Space Usage Breached The Threshold 357

          Solution Document           NFS Mount Point Disk Space Usage Breached The Threshold        Overview   General/Customer specific Sify TSL Author Rukmini Reviewer Seema Approver  Rukmini Release date 01/07/2022 Product Version                  ...

    • Unable to Mount Partition

      Getting error while mounting the partition Error – Already mounted or busy Answer: check if there is any process using that device (/dev/sda1). It is often a fsck process which runs automatically on system startup. You can check it quickly e.g. by ...

    • Unable to install logbeat Agent 358

           Solution Document        Unable to install logbeat Agent         Overview General/Customer specific General Author Rachita Reviewer Seema Approver  Sendil Release date Product Version              Audience: CSG/TechWarriors/PAC/Platform/Product ...

    • Unable to read data from logbeat Agent 389

      VuNet Systems Private Limited Unable to read data from logbeat Agent 389 Overview General/Customer specific RBL Author Rachitha H V Reviewer Seema Approver Tejaswi B Release date Product Version 8.5r5 Audience: CSG/TechWarriors/PAC/Platform/Product ...