Adds FAQ to Beats doc #1051
Merged
Adds FAQ to Beats doc #1051
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| === Can I read log files from network volumes? | ||
|
|
||
| We do not recommend reading log files from network volumes. Whenever possible, install Filebeat on the host machine and | ||
| send the log files directly from there. Reading files from network volumes (especially on Windows) can have unexpected side | ||
| effects. For example, changed file identifiers may result in Filebeat reading a log file from scratch again. | ||
|
|
||
| // === Why isn’t Filebeat collecting lines from my file? |
There was a problem hiding this comment.
- check if can filebeat send to logstash/elasticsearch (e.g. logstash connection established)
- ignore_older by default 24h. If file is older, it can not be send. (limit removed in master branch with introduction of close_older)
There was a problem hiding this comment.
@ruflin isn't ignore_older by default set to 0 in master?
There was a problem hiding this comment.
I'll add this for now and when the code in master is available in a release, we can remove point #2 about the default for ignore_older being 24h.
|
LGTM |
dedemorton
force-pushed
the
beats_issue#699
branch
2 times, most recently
from
2d43933 to
c74d46e
Compare
dedemorton
force-pushed
the
beats_issue#699
branch
from
c74d46e to
c9e6909
Compare
|
LGTM |
|
@dedemorton can you please rebase? |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Changes for #699.
First pass. I decided to add common FAQ questions to the FAQ for each Beat rather than having a separate section in libbeat for an FAQ (because I just think it's easier for users).
@elastic/beats There were a few sections that I haven't completed yet (commented out in the source). I would appreciate some input on those sections if you have it to offer. I also think some of the explanations should be fleshed out (for example, where we talk about why Packetbeat is missing long running transactions, it would be good to explain what users can do to fix the problem).