# Change file scan frequency in Winlogbeat

**URL:** <https://discuss.elastic.co/t/change-file-scan-frequency-in-winlogbeat/162950>\
**Category:** Beats\
**Tags:** winlogbeat\
**Created:** [January 4, 2019, 11:54am UTC](https://discuss.elastic.co/t/change-file-scan-frequency-in-winlogbeat/162950 "2019-01-04T11:54:03Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Yashwant\_Shettigar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yashwant_shettigar/32/47652_2.png) [@Yashwant\_Shettigar](https://discuss.elastic.co/u/Yashwant_Shettigar)\
**Post date:** [January 4, 2019, 11:54am UTC](https://discuss.elastic.co/t/change-file-scan-frequency-in-winlogbeat/162950/1 "2019-01-04T11:54:03Z")

</div>

As in filebeat there is an option to change file scan frequency. Can someone please let me know what is for winlogbeat ?

Is it "refresh\_frequency:10m" or "rotate\_every\_kb: 10000" ?  
[https://www.elastic.co/guide/en/beats/winlogbeat/current/file-output.html](https://www.elastic.co/guide/en/beats/winlogbeat/current/file-output.html)

My main concern is to know, in what conditions logs are being shipped to Master server via winlogbeat & filebeat.

---

<div class="post-metadata">

**Author:** ![Yashwant\_Shettigar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yashwant_shettigar/32/47652_2.png) [@Yashwant\_Shettigar](https://discuss.elastic.co/u/Yashwant_Shettigar)\
**Post date:** [January 7, 2019, 11:58am UTC](https://discuss.elastic.co/t/change-file-scan-frequency-in-winlogbeat/162950/2 "2019-01-07T11:58:50Z")

</div>

Can anyone answer my above query, please

---

<div class="post-metadata">

**Author:** ![andrewkroh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andrewkroh/32/3784_2.png) [@andrewkroh](https://discuss.elastic.co/u/andrewkroh)\
**Post date:** [January 27, 2019, 3:44pm UTC](https://discuss.elastic.co/t/change-file-scan-frequency-in-winlogbeat/162950/3 "2019-01-27T15:44:17Z")

</div>

There isn't an equivalent setting for Winlogbeat. It checks for new events every 1s by using the event log API. When events are available it continues reading them as fast as it can until no more are available, then it returns to checking every 1s.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [February 24, 2019, 3:44pm UTC](https://discuss.elastic.co/t/change-file-scan-frequency-in-winlogbeat/162950/4 "2019-02-24T15:44:22Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.