# About registry file

**URL:** <https://discuss.elastic.co/t/about-registry-file/58999>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [August 26, 2016, 2:47am UTC](https://discuss.elastic.co/t/about-registry-file/58999 "2016-08-26T02:47:14Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Elastic3150](https://avatars.discourse-cdn.com/v4/letter/e/43a26b/32.png) [@Elastic3150](https://discuss.elastic.co/u/Elastic3150)\
**Post date:** [August 26, 2016, 2:47am UTC](https://discuss.elastic.co/t/about-registry-file/58999/1 "2016-08-26T02:47:14Z")

</div>

I'm using filebeat version 5.0.0-alpha5 (amd64), libbeat 5.0.0-alpha5 in following config:

> paths:  
> - /pasth/to/access.log.\*  
> clean\_removed: true  
> close\_inactive: 2m  
> (snip)

I launch filebeat at '2016/8/26 11:30'.  
The following log(/var/log/filebeat/filebeat) was output.

> 2016-08-26T11:17:00+09:00 ERR State for /pasth/to/access.log.2016080705-50 should have been dropped, but couldn't as state is not finished.  
> 2016-08-26T11:17:00+09:00 ERR State for /pasth/to/access.log.2016080705-55 should have been dropped, but couldn't as state is not finished.  
> 2016-08-26T11:17:00+09:00 ERR State for /pasth/to/access.log.2016080706-00 should have been dropped, but couldn't as state is not finished.  
> (snip)

I set 2 params(clean\_removed, close\_inactive) to config to remove this ERR State log.  
If I am wrong, please tell me advise about this issue.

---

<div class="post-metadata">

**Author:** ![ruflin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ruflin/32/3116_2.png) [@ruflin](https://discuss.elastic.co/u/ruflin)\
**Post date:** [August 26, 2016, 7:59am UTC](https://discuss.elastic.co/t/about-registry-file/58999/2 "2016-08-26T07:59:15Z")

</div>

If you use `clean_removed` you must also use `close_removed` otherwise removed files will only be closed after `closed_inactive` and you will see the above message.

We fixed in the last 2 days a error related to that. Could you try the nightly build to see if this still happens? [https://beats-nightlies.s3.amazonaws.com/index.html?prefix=filebeat/](https://beats-nightlies.s3.amazonaws.com/index.html?prefix=filebeat/)

---

<div class="post-metadata">

**Author:** ![Elastic3150](https://avatars.discourse-cdn.com/v4/letter/e/43a26b/32.png) [@Elastic3150](https://discuss.elastic.co/u/Elastic3150)\
**Post date:** [August 29, 2016, 12:13am UTC](https://discuss.elastic.co/t/about-registry-file/58999/3 "2016-08-29T00:13:14Z")

</div>

Thank you for reply.  
Excuse me, before I watch your message, I removed registry file and solved this issue.  
I understand your comment.  
I will try alpha6.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [September 16, 2016, 2:47am UTC](https://discuss.elastic.co/t/about-registry-file/58999/4 "2016-09-16T02:47:16Z")

</div>

This topic was automatically closed after 21 days. New replies are no longer allowed.
