Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Backport of #1375 #1418

Merged
merged 1 commit into from
Apr 19, 2016
Merged

Backport of #1375 #1418

merged 1 commit into from
Apr 19, 2016

Conversation

ruflin
Copy link
Member

@ruflin ruflin commented Apr 19, 2016 •
edited
Loading

A direct commit backport was not possible as too many things changed in the prospector and harvester

Closes #1281

@ruflin
Backport of elastic#1375
1baadc2 
A direct commit backport was not possible as too many things changed in the prospector and harvester
@ruflin
Copy link
Member Author

ruflin commented Apr 19, 2016

@jstangroome Backport of #1281 to 1.2

@tsg tsg merged commit 301aaca into elastic:1.2 Apr 19, 2016
monicasarbu pushed a commit that referenced this pull request Apr 19, 2016
@tsg @monicasarbu
Automatic merge 1.2 branch in master (#1422)
5300dd5 
* New versions for the stack elements

* Remove link to github repo for dashboards

* Change config example that shows how to turn off process monitoring

* Clarify meaning of spool_size and harvester_buffer_size (#1388)

* Add more info to doc about configuring TLS (#1414)

* Backport of #1375 (#1418)

A direct commit backport was not possible as too many things changed in the prospector and harvester
@aellisv
Copy link

aellisv commented Apr 25, 2016

Was this released in filebeats 1.2?

I am running filebeat 1.2 on centos 6.7. I have filebeats harvesting logs that are compressed after 1 week and dropped after 1 month. I am seeing records dropped or cutoff from the front and I'm seeing filebeat log messages that include:

2016-04-25T22:25:42Z INFO Old file with new name found: /opt/openet/FW/data/edr/output/DC1-PCRF-03_20160417222039.edr is no /opt/openet/FW/data/edr/output/DC1-PCRF-03_20160425222041.edr
2016-04-25T22:25:42Z INFO Detected rename of a previously harvested file: /opt/openet/FW/data/edr/output/DC1-PCRF-03_20160417222039.edr -> /opt/openet/FW/data/edr/output/DC1-PCRF-03_20160425222041.edr

I have:
ignore_older: 2h
close_older: 2h

@ruflin
Copy link
Member Author

ruflin commented Apr 26, 2016

@aellisv which version of 1.2.x are you using?

@aellisv
Copy link

aellisv commented Apr 26, 2016

The package was: filebeat-1.2.1-x86_64.rpm

[andy.ellis@aellis01 ~]$ filebeat --version
filebeat version 1.2.1 (amd64)

From: Nicolas Ruflin [mailto:notifications@github.com]
Sent: Tuesday, April 26, 2016 00:27
To: elastic/beats
Cc: Ellis, Andy; Mention
Subject: Re: [elastic/beats] Backport of #1375 (#1418)

@aellisvhttps://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_aellisv&d=CwMCaQ&c=jcv3orpCsv7C4ly8-ubDob57ycZ4jvhoYZNDBA06fPk&r=PkLJz9_C2ES9EyNxl3TU3DYi0J22Eer8FsQLBbROCF4&m=N3XDvJcmL0ehCe-Jl2DVETi63Y7S0KY5s4nnopct8lA&s=A9ZbkdLYei5lKS3kowmmGZqP1VzuTqYxn8kzC2b8m3w&e= which version of 1.2.x are you using?

—
You are receiving this because you were mentioned.
Reply to this email directly or view it on GitHubhttps://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_elastic_beats_pull_1418-23issuecomment-2D214628480&d=CwMCaQ&c=jcv3orpCsv7C4ly8-ubDob57ycZ4jvhoYZNDBA06fPk&r=PkLJz9_C2ES9EyNxl3TU3DYi0J22Eer8FsQLBbROCF4&m=N3XDvJcmL0ehCe-Jl2DVETi63Y7S0KY5s4nnopct8lA&s=okMt8Zv-aRTo6iw1p2duEZUqZ-4OxLL2LlOTrpF3Swg&e=

@ruflin
Copy link
Member Author

ruflin commented Apr 26, 2016

@aellisv The backport will be released potentially today in 1.2.2

@ruflin ruflin deleted the backport-filebeat-registry-issue branch April 26, 2016 14:57
@aellisv
Copy link

aellisv commented Apr 26, 2016

Thank you.

From: Nicolas Ruflin [mailto:notifications@github.com]
Sent: Tuesday, April 26, 2016 08:58
To: elastic/beats
Cc: Ellis, Andy; Mention
Subject: Re: [elastic/beats] Backport of #1375 (#1418)

@aellisvhttps://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_aellisv&d=CwMCaQ&c=jcv3orpCsv7C4ly8-ubDob57ycZ4jvhoYZNDBA06fPk&r=PkLJz9_C2ES9EyNxl3TU3DYi0J22Eer8FsQLBbROCF4&m=oZFWTMn8I79O7Xw_HL4SggBiz-QZxy29bQWav3u1_sU&s=wWr6OqMJypMgLxQbQJL7FJoDlRup3LvGlneGFR1DCjU&e= The backport will be released potentially today in 1.2.2

—
You are receiving this because you were mentioned.
Reply to this email directly or view it on GitHubhttps://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_elastic_beats_pull_1418-23issuecomment-2D214772995&d=CwMCaQ&c=jcv3orpCsv7C4ly8-ubDob57ycZ4jvhoYZNDBA06fPk&r=PkLJz9_C2ES9EyNxl3TU3DYi0J22Eer8FsQLBbROCF4&m=oZFWTMn8I79O7Xw_HL4SggBiz-QZxy29bQWav3u1_sU&s=BtQZKVnsNAoKu5qvdftFqvvoqhZsSdp70jPkTC5osc0&e=

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
Filebeat Filebeat review
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
3 participants
@ruflin @aellisv @tsg