Skip to content
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
24 changes: 20 additions & 4 deletions filebeat/docs/inputs/input-journald.asciidoc
Original file line number Diff line number Diff line change
Expand Up @@ -106,13 +106,29 @@ an unique ID.
[id="{beatname_lc}-input-{type}-paths"]
==== `paths`

A list of paths that will be crawled and fetched. Each path can be a directory
path (to collect events from all journals in a directory), or a file path. If
you specify a directory, {beatname_uc} merges all journals under the directory
into a single journal and reads them.
A list of paths that will be crawled and fetched. A path can be either:

* A file path
* A directory path (to collect events from all journals in a directory). If you specify a directory, Filebeat merges all journals under the directory into a single journal and reads them.

If no paths are specified, {beatname_uc} reads from the default journal.

For example, this configuration will ingest all journals and correctly handle the journald rotation:

[source,yaml]
----
- type: journald
id: journald-id
paths:
- /var/log/journal
----


WARNING: If a glob (for example, `/var/log/journal/*/*.journal`) is used, the journald
input will only ingest the journal files found when started. New
files will not be ingested.


[float]
[id="{beatname_lc}-input-{type}-seek"]
==== `seek`
Expand Down