# Filebeat -e -d "\*" errorr

**URL:** <https://discuss.elastic.co/t/filebeat-e-d-errorr/225626>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [March 30, 2020, 7:48am UTC](https://discuss.elastic.co/t/filebeat-e-d-errorr/225626 "2020-03-30T07:48:24Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![thywoe](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/thywoe/32/65941_2.png) [@thywoe](https://discuss.elastic.co/u/thywoe)\
**Post date:** [March 30, 2020, 7:48am UTC](https://discuss.elastic.co/t/filebeat-e-d-errorr/225626/1 "2020-03-30T07:48:24Z")

</div>

I'm getting this "Exiting: data path already locked by another beat" anytime i execute this command 'sudo filebeat -e -d "\*" ' and i cannot see my logs on kibana. I need help.

---

<div class="post-metadata">

**Author:** ![ChrsMark](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/chrsmark/32/55858_2.png) [@ChrsMark](https://discuss.elastic.co/u/ChrsMark)\
**Post date:** [March 30, 2020, 8:48am UTC](https://discuss.elastic.co/t/filebeat-e-d-errorr/225626/2 "2020-03-30T08:48:09Z")

</div>

Hi @thywoe!

This error indicates that `data` directory used by Filebeat is already in use by another instance of Filebeat. Are you already running Filebeat?  
If not you can always delete this directory and start Filebeat again with `sudo filebeat -e -d "*"`.

---

<div class="post-metadata">

**Author:** ![thywoe](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/thywoe/32/65941_2.png) [@thywoe](https://discuss.elastic.co/u/thywoe)\
**Post date:** [March 30, 2020, 8:54am UTC](https://discuss.elastic.co/t/filebeat-e-d-errorr/225626/3 "2020-03-30T08:54:19Z")

</div>

Hi @ChrsMark

Yes, I'm running Filebeat already. There was another instance of filebeat before. so what do I do?

---

<div class="post-metadata">

**Author:** ![ChrsMark](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/chrsmark/32/55858_2.png) [@ChrsMark](https://discuss.elastic.co/u/ChrsMark)\
**Post date:** [March 30, 2020, 8:55am UTC](https://discuss.elastic.co/t/filebeat-e-d-errorr/225626/4 "2020-03-30T08:55:48Z")

</div>

Stop the already running Filebeat and start it again?

---

<div class="post-metadata">

**Author:** ![thywoe](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/thywoe/32/65941_2.png) [@thywoe](https://discuss.elastic.co/u/thywoe)\
**Post date:** [March 30, 2020, 9:00am UTC](https://discuss.elastic.co/t/filebeat-e-d-errorr/225626/5 "2020-03-30T09:00:48Z")

</div>

done. still same error message

---

<div class="post-metadata">

**Author:** ![ChrsMark](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/chrsmark/32/55858_2.png) [@ChrsMark](https://discuss.elastic.co/u/ChrsMark)\
**Post date:** [March 30, 2020, 9:04am UTC](https://discuss.elastic.co/t/filebeat-e-d-errorr/225626/6 "2020-03-30T09:04:10Z")

</div>

I would suggest to delete `data` directory, make sure that there is no running instances of Filebeat left, and then start Filebeat again.

Thank you!

---

<div class="post-metadata">

**Author:** ![thywoe](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/thywoe/32/65941_2.png) [@thywoe](https://discuss.elastic.co/u/thywoe)\
**Post date:** [March 30, 2020, 9:13am UTC](https://discuss.elastic.co/t/filebeat-e-d-errorr/225626/7 "2020-03-30T09:13:23Z")

</div>

Thank you so much @ChrsMark. it stopped giving error but i'm yet to see the logs on kibana. so i still i need help on that

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 27, 2020, 9:13am UTC](https://discuss.elastic.co/t/filebeat-e-d-errorr/225626/8 "2020-04-27T09:13:34Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.