Hello, We have the universal forwarder running on many machines. In general, the memory usage is 200MB and below. However, when adding the below stanza to inputs.conf it balloons to around 3000MB (3GB) on servers where the /var/www file path contains some content. [monitor:///var/www/.../storage/logs/laravel*.log]
index = lh-linux
sourcetype = laravel_log
disabled = 0 These logs are not plentiful or especially active, so I'm confused why the large spike in memory usage. There would only be a handful of logs and they'd be updated infrequently yet the memory spike happens anyway. I've tried to be as specific with the filepath as I can (I still need the wildcard directory path) but that doesn't seem to bring any better performance. There may be a lot of files in that path but only a handful that actually match the monitor stanza criteria. Any suggestions on what can be done? Thanks in advance.
... View more