File is inactive: Closing because close_inactive of 15m0s reached

Elastic Stack Beats
1

Hi Team,

frequently fIlebeat is stopped suddenly and can see below error in logs. please help on this.

File is inactive: Closing because close_inactive of 5m0s reached
2020-04-14T02:56:12.960-0500 INFO log/harvester.go:320 Reader was closed: /path/access.log. Closing.
2020-04-14T02:56:12.960-0500 INFO log/harvester.go:320 Reader was closed:

NOTE: we have a log file rotation

Thanks
Nikhilesh Gade

2

Please see this thread if it helps: Closing because close_inactive of 5m0s reached

3

I tired with that option keeping close_inactive as 30m0s , but still it is crashing

1 Like
4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.