I have done all you suggestions.
I think with state file you mean the positions.yml. they are located at /var/lib/alloy/
Deleted them and restarted.
But nothing happens
Metrics shows
loki_source_file_files_active_total{component_id="loki.source.file.router_log_scrape",component_path="/"} 0
Journatlctl -u alloy shows
Oct 04 07:00:10 logserver alloy[19993]: ts=2024-10-04T07:00:10.928720101Z level=debug msg="finished node evaluation" controller_path=/ controller_id="" node_id=prometheus.scrape.default duration=422.003<C2><B5>s
Oct 04 07:00:10 logserver alloy[19993]: ts=2024-10-04T07:00:10.929178209Z level=debug msg="finished node evaluation" controller_path=/ controller_id="" node_id=loki.source.syslog.local duration=321.666<C2><B5>s
Oct 04 07:00:10 logserver alloy[19993]: ts=2024-10-04T07:00:10.929396744Z level=debug msg="finished node evaluation" controller_path=/ controller_id="" node_id=loki.source.file.log_scrape duration=166.656<C2><B5>s
Oct 04 07:00:10 logserver alloy[19993]: ts=2024-10-04T07:00:10.929546877Z level=debug msg="finished node evaluation" controller_path=/ controller_id="" node_id=loki.source.file.router_log_scrape duration=111.322<C2><B5>s
Oct 04 07:00:10 logserver alloy[19993]: ts=2024-10-04T07:00:10.929737041Z level=debug msg="finished node evaluation" controller_path=/ controller_id="" node_id=loki.source.file.syslog_scrape duration=144.016<C2><B5>s
Oct 04 07:00:10 logserver alloy[19993]: ts=2024-10-04T07:00:10.929873688Z level=debug msg="finished node evaluation" controller_path=/ controller_id="" node_id=loki.source.file.subfolder_log_scrape duration=100.302<C2><B5>s
Oct 04 07:00:10 logserver alloy[19993]: ts=2024-10-04T07:00:10.935998458Z level=info msg="starting cluster node" service=cluster peers_count=0 peers="" advertise_addr=127.0.0.1:12345
Oct 04 07:00:10 logserver alloy[19993]: ts=2024-10-04T07:00:10.936139342Z level=debug msg="logserver @3: participant" service=cluster
Oct 04 07:00:10 logserver alloy[19993]: ts=2024-10-04T07:00:10.937003434Z level=info msg="peers changed" service=cluster peers_count=1 peers=logserver
Oct 04 07:00:10 logserver alloy[19993]: ts=2024-10-04T07:00:10.938805426Z level=debug msg="passed new targets to scrape manager" component_path=/ component_id=prometheus.scrape.default
Oct 04 07:00:10 logserver alloy[19993]: ts=2024-10-04T07:00:10.942327778Z level=debug msg="tailing new file" component_path=/ component_id=loki.source.file.log_scrape filename=/var/log/alternatives.log
Oct 04 07:00:10 logserver alloy[19993]: ts=2024-10-04T07:00:10.94318362Z level=debug msg="tailing new file" component_path=/ component_id=loki.source.file.log_scrape filename=/var/log/auth.log
Oct 04 07:00:10 logserver alloy[19993]: ts=2024-10-04T07:00:10.943760859Z level=debug msg="tailing new file" component_path=/ component_id=loki.source.file.log_scrape filename=/var/log/cron.log
Oct 04 07:00:10 logserver alloy[19993]: ts=2024-10-04T07:00:10.944331532Z level=debug msg="tailing new file" component_path=/ component_id=loki.source.file.log_scrape filename=/var/log/daemon.log
Oct 04 07:00:10 logserver alloy[19993]: ts=2024-10-04T07:00:10.94484838Z level=debug msg="tailing new file" component_path=/ component_id=loki.source.file.log_scrape filename=/var/log/dpkg.log
Oct 04 07:00:10 logserver alloy[19993]: ts=2024-10-04T07:00:10.945066887Z level=debug msg="tailing new file" component_path=/ component_id=loki.source.file.log_scrape filename=/var/log/mail.log
Oct 04 07:00:10 logserver alloy[19993]: ts=2024-10-04T07:00:10.945285242Z level=debug msg="tailing new file" component_path=/ component_id=loki.source.file.log_scrape filename=/var/log/ubuntu-advantage-timer.log
Oct 04 07:00:10 logserver alloy[19993]: ts=2024-10-04T07:00:10.945448412Z level=debug msg="tailing new file" component_path=/ component_id=loki.source.file.log_scrape filename=/var/log/ubuntu-advantage.log
Oct 04 07:00:10 logserver alloy[19993]: ts=2024-10-04T07:00:10.945627896Z level=debug msg="tailing new file" component_path=/ component_id=loki.source.file.log_scrape filename=/var/log/user.log
Oct 04 07:00:10 logserver alloy[19993]: ts=2024-10-04T07:00:10.945711059Z level=info msg="retrieved and stored the position of the last line" component_path=/ component_id=loki.source.file.log_scrape
Oct 04 07:00:10 logserver alloy[19993]: ts=2024-10-04T07:00:10.945816131Z level=debug msg="finished node evaluation" controller_path=/ controller_id="" node_id=loki.source.file.log_scrape duration=3.791313ms
Oct 04 07:00:10 logserver alloy[19993]: ts=2024-10-04T07:00:10.946155024Z level=debug msg="tailing new file" component_path=/ component_id=loki.source.file.syslog_scrape filename=/var/log/syslog
Oct 04 07:00:10 logserver alloy[19993]: ts=2024-10-04T07:00:10.946301873Z level=debug msg="finished node evaluation" controller_path=/ controller_id="" node_id=loki.source.file.syslog_scrape duration=428.021<C2><B5>s
Oct 04 07:00:10 logserver alloy[19993]: ts=2024-10-04T07:00:10.946429459Z level=debug msg="no files targets were passed, nothing will be tailed" component_path=/ component_id=loki.source.file.router_log_scrape
Oct 04 07:00:10 logserver alloy[19993]: ts=2024-10-04T07:00:10.946464339Z level=debug msg="finished node evaluation" controller_path=/ controller_id="" node_id=loki.source.file.router_log_scrape duration=106.084<C2><B5>s