# Filebeat-6.2.4 no send finish in time

**URL:** <https://discuss.elastic.co/t/filebeat-6-2-4-no-send-finish-in-time/131404>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [May 11, 2018, 6:09am UTC](https://discuss.elastic.co/t/filebeat-6-2-4-no-send-finish-in-time/131404 "2018-05-11T06:09:01Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![charliecen](https://avatars.discourse-cdn.com/v4/letter/c/3be4f8/32.png) [@charliecen](https://discuss.elastic.co/u/charliecen)\
**Post date:** [May 11, 2018, 6:09am UTC](https://discuss.elastic.co/t/filebeat-6-2-4-no-send-finish-in-time/131404/1 "2018-05-11T06:09:01Z")

</div>

#### Problem description：

More than 2000 files are generated per hour in the multi-level directory， I only need to log in an hour, so I'm configuration `ignore_older: 1 h`, but after an hour, which is 1 hour before the file is not sent. How can I solve this problem?

#### config file

```auto
filebeat.prospectors:
- input_type: log
  paths:
    - /vol2/ZT2M/*/*/*.log.*
  scan_frequency: 10s
  ignore_older: 1h
  close_eof: true
  close_timeout: 3h
  close_interval: 5m
  close_removed: true
  clean_removed: true
  clean_inactive: 3h
  exclude_lines: ["存储至", "压缩档案数据成功"]
  include_lines: ['^\d{6}-\d{2}:\d{2}:\d{2}']
output.logstash:
  hosts: ["127.0.0.1:5044"]

```

#### Pictures show

![qq20180510-170655](https://user-images.githubusercontent.com/6268321/39861888-a3b3e60a-5474-11e8-8689-ca2a639b9654.jpg)

The logs are getting less and less from 13:00 to 13:59.

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [May 11, 2018, 6:25am UTC](https://discuss.elastic.co/t/filebeat-6-2-4-no-send-finish-in-time/131404/2 "2018-05-11T06:25:03Z")

</div>

What does your Logstash configuration look like? What is the specification of your Elasticsearch cluster?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 8, 2018, 6:25am UTC](https://discuss.elastic.co/t/filebeat-6-2-4-no-send-finish-in-time/131404/3 "2018-06-08T06:25:12Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.