Close_removed behavior


(Song Guo) #1

Hi All, I am new to filebeat. Recently I had a scenario that one of the log files was deleted, I could not see it using ls, but the disk space by this file was not released. After I reset filebeat, then disk space was released. The setting "close_removed" is enabled by default, it should release the file handle when the file was deleted. Can this be a bug that the filebeat busy doing other things like talking to logstash and not going to the release handle logic? The version I used is 1.2.3_amd64.deb Thanks.


#2

Hi @jigsaw1079

I believe close_removed was only introduced in 5.0 branch, not in 1.2 or 1.3.


(ruflin) #3

@jigsaw1079 As @shog stated close_removed is only available in filebeat 5.0


(Song Guo) #4

Oh~~, ok. Thanks. Then I need to upgrade my filebeat.


(system) #5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.