# Filebeat Drop Messages

**URL:** <https://discuss.elastic.co/t/filebeat-drop-messages/63478>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [October 20, 2016, 7:28am UTC](https://discuss.elastic.co/t/filebeat-drop-messages/63478 "2016-10-20T07:28:38Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![RdrgPorto](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rdrgporto/32/13278_2.png) [@RdrgPorto](https://discuss.elastic.co/u/RdrgPorto)\
**Post date:** [October 20, 2016, 7:28am UTC](https://discuss.elastic.co/t/filebeat-drop-messages/63478/1 "2016-10-20T07:28:39Z")

</div>

Hi everyone,

I have a doubt about **Filebeat**. For example, we have a **Filebeat** which is send several logs to **Redis**. If there is a problem with **Redis** , such as memory problems or **Redis** is down, what **Filebeat** will do? will it drop them? Is it better to send to **Logstash**?

Thanks in advance,

Regards

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [October 20, 2016, 9:27am UTC](https://discuss.elastic.co/t/filebeat-drop-messages/63478/2 "2016-10-20T09:27:12Z")

</div>

> I have a doubt about Filebeat. For example, we have a Filebeat which is send several logs to Redis. If there is a problem with Redis, such as memory problems or Redis is down, what Filebeat will do?

It will wait until Redis is available again. As long as the input files aren't rotated you'll be fine. If the files are rotated I suspect the behavior depends on your filename pattern and possibly how the files are rotated.

> will it drop them? Is it better to send to Logstash?

No, Logstash itself has no built-in buffer.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 10, 2016, 7:28am UTC](https://discuss.elastic.co/t/filebeat-drop-messages/63478/3 "2016-11-10T07:28:45Z")

</div>

This topic was automatically closed after 21 days. New replies are no longer allowed.