# Does Filebeat registry file get deleted during reboot

**URL:** https://discuss.elastic.co/t/does-filebeat-registry-file-get-deleted-during-reboot/121222
**Category:** Beats
**Tags:** filebeat
**Created:** [February 23, 2018, 1:58pm UTC](https://discuss.elastic.co/t/does-filebeat-registry-file-get-deleted-during-reboot/121222 "2018-02-23T13:58:47Z")
**Posts on this page:** 5
**Page:** 1

<div class="post-metadata">

### Author: ![ELK\_GB](https://avatars.discourse-cdn.com/v4/letter/e/a9adbd/32.png) [@ELK\_GB](https://discuss.elastic.co/u/ELK_GB)
#### Post date: [February 23, 2018, 1:58pm UTC](https://discuss.elastic.co/t/does-filebeat-registry-file-get-deleted-during-reboot/121222/1 "2018-02-23T13:58:47Z")

</div>

Hi,

I'm just wondering does the Filebeat registry file get reset or re-created when rebooting the machine the beat is running on ? Is there any way the file could get affected by any operation other than manually deleting file that could cause filebeat to resend data again from all defined logs prospectors ?

Thanks

---

<div class="post-metadata">

### Author: ![andrewkroh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andrewkroh/32/3784_2.png) [@andrewkroh](https://discuss.elastic.co/u/andrewkroh)
#### Post date: [February 23, 2018, 3:14pm UTC](https://discuss.elastic.co/t/does-filebeat-registry-file-get-deleted-during-reboot/121222/2 "2018-02-23T15:14:55Z")

</div>

The registry data is not reset by Filebeat. The file is periodically re-written while it's running. The various `clean_` [configuration options](https://www.elastic.co/guide/en/beats/filebeat/current/configuration-filebeat-options.html#clean-options) control when Filebeat will remove an individual file record from being tracked in the registry.

---

<div class="post-metadata">

### Author: ![ELK\_GB](https://avatars.discourse-cdn.com/v4/letter/e/a9adbd/32.png) [@ELK\_GB](https://discuss.elastic.co/u/ELK_GB)
#### Post date: [February 23, 2018, 3:44pm UTC](https://discuss.elastic.co/t/does-filebeat-registry-file-get-deleted-during-reboot/121222/3 "2018-02-23T15:44:24Z")

</div>

@andrewkroh thanks for your response! So what would be the default behavior if I have touched non of those options ?

An from your response I assume nothing should be changed when rebooting my Linux machine and Filebeat should continue normally, from where it left off ?

---

<div class="post-metadata">

### Author: ![andrewkroh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andrewkroh/32/3784_2.png) [@andrewkroh](https://discuss.elastic.co/u/andrewkroh)
#### Post date: [February 23, 2018, 3:48pm UTC](https://discuss.elastic.co/t/does-filebeat-registry-file-get-deleted-during-reboot/121222/4 "2018-02-23T15:48:21Z")

</div>

Well [`clean_removed`](https://www.elastic.co/guide/en/beats/filebeat/current/configuration-filebeat-options.html#clean-removed) is on by default. Where are the files mounted from? If the inode numbers change on reboot then Filebeat will treat everything as new files.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [March 23, 2018, 3:48pm UTC](https://discuss.elastic.co/t/does-filebeat-registry-file-get-deleted-during-reboot/121222/5 "2018-03-23T15:48:24Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
