I am facing a weird issue w.r.to filebeat.
I am having a Centralise server where I rsync all my production server logs.
I have a log file p1dm.log which I rsync every 10 mins and the file gets rotated after 1 hour.
Filebeat reads the log and then pushes to my Elastic.
In my graylog UI when I select the field **"filebeat_log_file_path " I get two files of p1dm.log with weird characters at end of file.
I dont know why this “r2HY9Y” is getting appended to my log file. After every rsync my file name is getting changed to some random characters at the end of my file name.
Kindly help as I do not want such chars and instead i just need to keep it as p1dm.log as a single file which will be read after every rsync.