# Filebeat and file descriptor

**URL:** https://discuss.elastic.co/t/filebeat-and-file-descriptor/156894
**Category:** Beats
**Tags:** filebeat
**Created:** [November 15, 2018, 3:08pm UTC](https://discuss.elastic.co/t/filebeat-and-file-descriptor/156894 "2018-11-15T15:08:56Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![Eric\_Duquesnoy](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/eric_duquesnoy/32/37637_2.png) [@Eric\_Duquesnoy](https://discuss.elastic.co/u/Eric_Duquesnoy)
#### Post date: [November 15, 2018, 3:08pm UTC](https://discuss.elastic.co/t/filebeat-and-file-descriptor/156894/1 "2018-11-15T15:08:56Z")

</div>

We run Filebeat in version 6.4.2 with this configuration (installed like a linux agent)

```
  filebeat.autodiscover:
  providers:
    - type: docker
      templates:
        - condition:
            regexp:
              docker.container.name: ".*"
          config:
            - type: docker
              containers.ids:
                - "${data.docker.container.id}"
              processors:
               - add_docker_metadata: ~

```

seems to hold the socket /var/run/docker.sock and not to release the file descriptor.  
After a while , the number of file descriptor opens is over than 65000 !  
Docker and filebeat reach the system limit and crash.  
I don't understand why filebeat doesn't release the socket at each action ...

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [December 13, 2018, 3:09pm UTC](https://discuss.elastic.co/t/filebeat-and-file-descriptor/156894/2 "2018-12-13T15:09:13Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.