# Filebeat 7.6.1 - persistence of logs

**URL:** <https://discuss.elastic.co/t/filebeat-7-6-1-persistence-of-logs/274702>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [June 2, 2021, 5:56am UTC](https://discuss.elastic.co/t/filebeat-7-6-1-persistence-of-logs/274702 "2021-06-02T05:56:01Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![ramachandranmr88](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ramachandranmr88/32/89626_2.png) [@ramachandranmr88](https://discuss.elastic.co/u/ramachandranmr88)\
**Post date:** [June 2, 2021, 5:56am UTC](https://discuss.elastic.co/t/filebeat-7-6-1-persistence-of-logs/274702/1 "2021-06-02T05:56:01Z")

</div>

I am new to using ELK.

I have the following configuration:

Filebeat—\>Logstash—\>Elasticsearch—\>Kibana.

I have the following questions

1. When filebeat service is stopped while Logstash is still running and later when filebeat service is restarted, how does filebeat keep a track of the logs read already and from  
where it has to start ?

2. When Logstash service is stopped while filebeat is running and later when Logstash service is restarted how the pending logs are sent to Logstash ?

3. Do I need to follow a particular order to start the services ?

---

<div class="post-metadata">

**Author:** ![ramachandranmr88](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ramachandranmr88/32/89626_2.png) [@ramachandranmr88](https://discuss.elastic.co/u/ramachandranmr88)\
**Post date:** [June 11, 2021, 7:10pm UTC](https://discuss.elastic.co/t/filebeat-7-6-1-persistence-of-logs/274702/2 "2021-06-11T19:10:02Z")

</div>

Found that I was running filebeat without disown command .

This can be closed.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 9, 2021, 9:10pm UTC](https://discuss.elastic.co/t/filebeat-7-6-1-persistence-of-logs/274702/3 "2021-07-09T21:10:20Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
