# Compiled Filebeat for rpi successfully but spool doesn't work

**URL:** <https://discuss.elastic.co/t/compiled-filebeat-for-rpi-successfully-but-spool-doesnt-work/172374>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [March 14, 2019, 3:40pm UTC](https://discuss.elastic.co/t/compiled-filebeat-for-rpi-successfully-but-spool-doesnt-work/172374 "2019-03-14T15:40:57Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![Zen\_Spartan1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/zen_spartan1/32/42017_2.png) [@Zen\_Spartan1](https://discuss.elastic.co/u/Zen_Spartan1)\
**Post date:** [March 14, 2019, 3:40pm UTC](https://discuss.elastic.co/t/compiled-filebeat-for-rpi-successfully-but-spool-doesnt-work/172374/1 "2019-03-14T15:40:57Z")

</div>

I have successfully compiled Filebeat 6.6.2 for the RPI, filebeat works as expected but completely ignores settings spool settings to write to a file. The log shows filebeat working normally but contains no reference to why the spooling doesnt work. I've searched the whole filesystem for the spool.dat to no avail.

Can anyone point me in the right direction?

cheers

Zen

---

<div class="post-metadata">

**Author:** ![steffens](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/steffens/32/79630_2.png) [@steffens](https://discuss.elastic.co/u/steffens)\
**Post date:** [March 15, 2019, 2:08pm UTC](https://discuss.elastic.co/t/compiled-filebeat-for-rpi-successfully-but-spool-doesnt-work/172374/2 "2019-03-15T14:08:37Z")

</div>

Can you share your config?

---

<div class="post-metadata">

**Author:** ![Zen\_Spartan1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/zen_spartan1/32/42017_2.png) [@Zen\_Spartan1](https://discuss.elastic.co/u/Zen_Spartan1)\
**Post date:** [March 15, 2019, 2:31pm UTC](https://discuss.elastic.co/t/compiled-filebeat-for-rpi-successfully-but-spool-doesnt-work/172374/3 "2019-03-15T14:31:38Z")

</div>

```
   filebeat.inputs:

- type: log

  enabled: true
  paths:
    - /logs/*.csv

spool:
  file:
    path: "${path.data}/spool.dat"
    size: 500MiB
    page_size: 16KiB
    prealloc: true
  write:
    buffer_size: 1MiB
    flush.timeout: 5s
    flush.events: 100
output.logstash:
  # The Logstash hosts
  hosts: ["192.168.1.100:5044"]

```

many thanks

---

<div class="post-metadata">

**Author:** ![steffens](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/steffens/32/79630_2.png) [@steffens](https://discuss.elastic.co/u/steffens)\
**Post date:** [March 15, 2019, 2:55pm UTC](https://discuss.elastic.co/t/compiled-filebeat-for-rpi-successfully-but-spool-doesnt-work/172374/4 "2019-03-15T14:55:13Z")

</div>

The setting should be:

```auto
queue.spool:
 ...

```

---

<div class="post-metadata">

**Author:** ![Zen\_Spartan1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/zen_spartan1/32/42017_2.png) [@Zen\_Spartan1](https://discuss.elastic.co/u/Zen_Spartan1)\
**Post date:** [March 15, 2019, 3:33pm UTC](https://discuss.elastic.co/t/compiled-filebeat-for-rpi-successfully-but-spool-doesnt-work/172374/5 "2019-03-15T15:33:59Z")

</div>

thank you, that solved the problem!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 12, 2019, 3:34pm UTC](https://discuss.elastic.co/t/compiled-filebeat-for-rpi-successfully-but-spool-doesnt-work/172374/6 "2019-04-12T15:34:00Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.