IMPORTANT: No additional bug fixes or documentation updates
will be released for this version. For the latest information, see the
current release documentation.
If something went wrong
editIf something went wrong
editIf for whatever reason you’d like to revert the configuration after running the migrated configuration
and return to old log
inputs the files that were taken by filestream
inputs, you need to do the following:
- Stop Filebeat as soon as possible
-
Find your
registry.path/filebeat
directory -
Find the created backup files, they have the
<timestamp>.bak
suffix. If you have multiple backups for the same file, choose the one with the more recent timestamp. -
Replace the files with their backups, e.g.
log.json
should be replaced bylog.json-1674152412247684000.bak
-
Run Filebeat with the old configuration (no
filestream
inputs withtake_over: true
).
Reverting to backups might cause some events to repeat, depends on the amount of time the new configuration was running.