How to reset fluentd position file to re-read old logs
Issue
- Could we delete
/var/log/es-containers.log.posafter cluster-logging redeployment? - How do
.posfiles work in fluentd? - We experience a lot of cluster-logging issues which can't be solved in a short time, but we do need the old container logs. Because the es-containers.log.pos is stored directly on the node itself, after a redeployment only the new logs are available in elasticsearch. Could we delete the es-containers.log.pos to fetch all logs which are available under
/var/log/containers/*.log?
Environment
- Red Hat OpenShift Container Platform
- 4.7
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.
