sof-elk
sof-elk copied to clipboard
use input scrubber?
clear files that have been loaded and not modded in some time:
https://pypi.org/project/filebeat-scrubber/
maybe use this method to auto-kick the AWS logs that don't have a newline?
that tool is not being updated and works with an older version of filebeat. upon further consideration, I don't think automatically removing input files is a good idea.
the filebeat registry may provide a means of a "status bar" of sorts in the future. filebeat also has an optional API that may provide the same functionality, possibly via the undocumented /dataset
api route.