We are monitoring docker container logs in base linux OS using universal forwarder, whenever docker containers gets restarted the old files will get deleted and new files/folders will get created. When that happens Splunk UF (7.2.3) stops reading new files. I think it is still looking for old file, how to handle this situation ?
