How to Prevent Fluent Bit's Tail Input from Missing Log Lines

Better Stack Team
Updated on August 11, 2024

If Fluent Bit's tail input only captures the initial lines of your log files and does not capture subsequent entries until a restart, the problem is likely due to how file changes are being monitored.

To resolve this, enable the Inotify_Watcher option. This tells Fluent Bit to leverage Linux's notify mechanism to detect file changes in real time.

Here's how to configure it:

/etc/fluent-bit/fluent-bit.conf
[INPUT]
    Name          tail
    Path          /var/log/myapp/*.log
    Tag           myapp.*
    Inotify_Watcher On

[OUTPUT]
    Name          stdout
    Match         myapp.*

When you enable the Inotify_Watcher, Fluent Bit will immediately capture every new log line as it's written, even during file rotations, without needing continuous polling.

Make your mark

Join the writer's program

Are you a developer and love writing and sharing your knowledge with the world? Join our guest writing program and get paid for writing amazing technical guides. We'll get them to the right readers that will appreciate them.

Write for us
Writer of the month
Marin Bezhanov
Marin is a software engineer and architect with a broad range of experience working...
Build on top of Better Stack

Write a script, app or project on top of Better Stack and share it with the world. Make a public repository and share it with us at our email.

community@betterstack.com

or submit a pull request and help us build better products for everyone.

See the full list of amazing projects on github