# After AKS Node Restart - We have lost Disk Queue

**URL:** <https://discuss.elastic.co/t/after-aks-node-restart-we-have-lost-disk-queue/345158>\
**Category:** Beats\
**Tags:** elastic-stack-monitoring, docker, filebeat\
**Created:** [October 17, 2023, 5:22am UTC](https://discuss.elastic.co/t/after-aks-node-restart-we-have-lost-disk-queue/345158 "2023-10-17T05:22:51Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![zoheb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/zoheb/32/126560_2.png) [@zoheb](https://discuss.elastic.co/u/zoheb)\
**Post date:** [October 17, 2023, 5:22am UTC](https://discuss.elastic.co/t/after-aks-node-restart-we-have-lost-disk-queue/345158/1 "2023-10-17T05:22:51Z")

</div>

Hi Team,

Yesterday we have restarted our AKS Nodes and we have lost the disk queue. We see a new folder being created at AKS Node.

Here is the configuration file for filebeat:

volumeMounts:  
- name: config  
mountPath: /etc/filebeat.yml  
readOnly: true  
subPath: filebeat.yml  
- name: data  
mountPath: /usr/share/filebeat/data  
- name: varlibdockercontainers  
mountPath: /var/lib/docker/containers  
readOnly: true  
- name: varlog  
mountPath: /var/log  
readOnly: true  
volumes:  
- name: config  
configMap:  
defaultMode: 0600  
name: filebeat-config  
- name: varlibdockercontainers  
hostPath:  
path: /var/lib/docker/containers  
- name: varlog  
hostPath:  
path: /var/log  
# data folder stores a registry of read status for all files, so we don't send everything again on a Filebeat pod restart  
- name: data  
hostPath:  
path: /var/lib/filebeat-data  
type: DirectoryOrCreate

In order to retain the existing data/disk queue, is there a specific configuration we need to do in filebeat yaml?

As AKS node restart should not clear the disk queue and the data should be persistent even after AKS node restart.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 14, 2023, 7:23am UTC](https://discuss.elastic.co/t/after-aks-node-restart-we-have-lost-disk-queue/345158/2 "2023-11-14T07:23:05Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.