I am monitoring the directory where IIS logs are stored. The universal forwarder is sending the information on a dedicated index.
To upgrade the universal forwarder, I saved the customization files then I uninstalled the previous version. Then I installed the latest version copying the customization.
As result the universal forwarder re-indexed all files in the logs directory introducing a license violation.
Is it possible to avoid this behaviour saving the previous status of the indexed logs?
↧