# Filebeat 7.10 doesn't follow log while log rotation occur
**URL:** https://discuss.elastic.co/t/filebeat-7-10-doesnt-follow-log-while-log-rotation-occur/256034
**Category:** Beats
**Tags:** filebeat
**Created:** [November 19, 2020, 8:41pm UTC](https://discuss.elastic.co/t/filebeat-7-10-doesnt-follow-log-while-log-rotation-occur/256034 "2020-11-19T20:41:18Z")
**Posts on this page:** 3
**Page:** 1
### Author:  [@Mahoni](https://discuss.elastic.co/u/Mahoni)
#### Post date: [November 19, 2020, 8:41pm UTC](https://discuss.elastic.co/t/filebeat-7-10-doesnt-follow-log-while-log-rotation-occur/256034/1 "2020-11-19T20:41:18Z")
filebeat 7.10 doesn't follow log while log rotation occur, log files inode number is changing but filebeat doesn't follow the log file;
```auto
# ls -ltr /logs/user-app.tomcat/applicationLogs/tra*.log*
-rw-r--r-- 1 user user 10485870 Nov 18 15:35 /logs/user-app.tomcat/applicationLogs/trace.log.10
-rw-r--r-- 1 user user 10485761 Nov 18 16:09 /logs/user-app.tomcat/applicationLogs/trace.log.9
-rw-r--r-- 1 user user 10485842 Nov 18 17:02 /logs/user-app.tomcat/applicationLogs/trace.log.8
-rw-r--r-- 1 user user 10485801 Nov 19 04:45 /logs/user-app.tomcat/applicationLogs/trace.log.7
-rw-r--r-- 1 user user 10485841 Nov 19 08:15 /logs/user-app.tomcat/applicationLogs/trace.log.6
-rw-r--r-- 1 user user 10485776 Nov 19 09:07 /logs/user-app.tomcat/applicationLogs/trace.log.5
-rw-r--r-- 1 user user 10485939 Nov 19 09:45 /logs/user-app.tomcat/applicationLogs/trace.log.4
-rw-r--r-- 1 user user 10485803 Nov 19 10:26 /logs/user-app.tomcat/applicationLogs/trace.log.3
-rw-r--r-- 1 user user 10485904 Nov 19 11:00 /logs/user-app.tomcat/applicationLogs/trace.log.2
-rw-r--r-- 1 user user 10485766 Nov 19 11:35 /logs/user-app.tomcat/applicationLogs/trace.log.1
-rw-r--r-- 1 user user 3304878 Nov 19 11:46 /logs/user-app.tomcat/applicationLogs/trace.log
```
filebeat.ylm config file is like this ;
```auto
filebeat.inputs:
- type: log
enabled: false
paths:
- /var/log/*.log
- type: log
enabled: true
paths:
- /logs/user-app.tomcat/applicationLogs/trace.log*
- /logs/user-app.tomcat/applicationLogs/yrucrem.log*
exclude_files: ['\.gz$']
[...]
```
before the log rotation
```auto
stat /logs/user-app.tomcat/applicationLogs/trace.log | egrep "Inode"
Device: fd08h/64776d Inode: 98322 Links: 1
```
after the log rotation:
```auto
# stat /logs/user-app.tomcat/applicationLogs/trace.log | egrep "Inode|File"
File: ‘/logs/user-app.tomcat/applicationLogs/trace.log’
Device: fd08h/64776d Inode: 98325 Links: 1
```
Once I restart filebeat service it is running again.
---
### Author:  [@shaunak](https://discuss.elastic.co/u/shaunak)
#### Post date: [November 23, 2020, 12:33am UTC](https://discuss.elastic.co/t/filebeat-7-10-doesnt-follow-log-while-log-rotation-occur/256034/2 "2020-11-23T00:33:46Z")
Hi @Mahoni, welcome to the Elastic community forums!
Is this path a network mount by any chance?
Can you run `lsof` on the Filebeat process before and after the rotation and post the results here please?
Also, are you seeing any errors or warnings in the Filebeat log? If possible, could you post the Filebeat log entries from about 20 seconds before the file rotation to about 20 seconds after it?
Thanks,
Shaunak
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [December 21, 2020, 2:33am UTC](https://discuss.elastic.co/t/filebeat-7-10-doesnt-follow-log-while-log-rotation-occur/256034/3 "2020-12-21T02:33:47Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.