Filebeat and file descriptor

Elastic Stack Beats
1

We run Filebeat in version 6.4.2 with this configuration (installed like a linux agent)

  filebeat.autodiscover:
  providers:
    - type: docker
      templates:
        - condition:
            regexp:
              docker.container.name: ".*"
          config:
            - type: docker
              containers.ids:
                - "${data.docker.container.id}"
              processors:
               - add_docker_metadata: ~

seems to hold the socket /var/run/docker.sock and not to release the file descriptor.
After a while , the number of file descriptor opens is over than 65000 !
Docker and filebeat reach the system limit and crash.
I don't understand why filebeat doesn't release the socket at each action ...

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.