logstash - Filebeat - 从远程目录读取

Question

是否可以将文件节拍设置为从远程目录读取(因为我无法在那台机器上安装进程)

我在beats yml上是这样设置的:

filebeat:
  # List of prospectors to fetch data.
  prospectors:
    # Each - is a prospector. Below are the prospector specific configurations
    -
      paths:
        - \\remotemachine\remotedir\*\*.log
      input_type: log
      document_type: RemoteLogs

好像不行

Answer 1

We do not recommend reading log files from network volumes. Whenever possible, install Filebeat on the host machine and send the log files directly from there. Reading files from network volumes (especially on Windows) can have unexpected side effects. For example, changed file identifiers may result in Filebeat reading a log file from scratch again.

Filebeat Reference » Troubleshooting » Frequently asked questions