# Filebeat.exe high RAM usage

**URL:** https://discuss.elastic.co/t/filebeat-exe-high-ram-usage/62254
**Category:** Beats
**Tags:** filebeat
**Created:** [October 5, 2016, 10:32am UTC](https://discuss.elastic.co/t/filebeat-exe-high-ram-usage/62254 "2016-10-05T10:32:48Z")
**Posts on this page:** 11
**Page:** 1

<div class="post-metadata">

### Author: ![Slava](https://avatars.discourse-cdn.com/v4/letter/s/b487fb/32.png) [@Slava](https://discuss.elastic.co/u/Slava)
#### Post date: [October 5, 2016, 10:32am UTC](https://discuss.elastic.co/t/filebeat-exe-high-ram-usage/62254/1 "2016-10-05T10:32:48Z")

</div>

Noticed on some servers (Windows Server 2012R2) that filebeat.exe process can use up to 1.5GB of RAM. Service restart solves the problem but I would like to know the reason and ways to troubleshoot. Many thanks.

---

<div class="post-metadata">

### Author: ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [October 5, 2016, 10:36am UTC](https://discuss.elastic.co/t/filebeat-exe-high-ram-usage/62254/2 "2016-10-05T10:36:55Z")

</div>

What kind of memory usage are we talking about? Virtual memory? Working set size? Private bytes? E.g. Process Explorer can give you this information (maybe also newer versions of Task Manager).

---

<div class="post-metadata">

### Author: ![Slava](https://avatars.discourse-cdn.com/v4/letter/s/b487fb/32.png) [@Slava](https://discuss.elastic.co/u/Slava)
#### Post date: [October 5, 2016, 12:50pm UTC](https://discuss.elastic.co/t/filebeat-exe-high-ram-usage/62254/3 "2016-10-05T12:50:04Z")

</div>

See the screenshot with current situation. It is growing up after service restart.  
 ![](https://us1.discourse-cdn.com/elastic/original/2X/6/655df45bf91f06e3f0f4f9f966370138047d52a6.PNG)

---

<div class="post-metadata">

### Author: ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [October 5, 2016, 12:53pm UTC](https://discuss.elastic.co/t/filebeat-exe-high-ram-usage/62254/4 "2016-10-05T12:53:30Z")

</div>

Okay, but this isn't necessarily a problem since it's the virtual size. The virtual size grows e.g. when a file is mapped into memory, regardless of whether it ever touches RAM. The peak working set is just 48 MB so it has never used more RAM than that. I'd expect the Filebeat team to know more about why it might look like this.

---

<div class="post-metadata">

### Author: ![andrewkroh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andrewkroh/32/3784_2.png) [@andrewkroh](https://discuss.elastic.co/u/andrewkroh)
#### Post date: [October 5, 2016, 1:04pm UTC](https://discuss.elastic.co/t/filebeat-exe-high-ram-usage/62254/5 "2016-10-05T13:04:25Z")

</div>

High virtual size is typical of 64-bit Go programs.

[Go FAQ - Why does my Go process use so much virtual memory?](https://golang.org/doc/faq#Why_does_my_Go_process_use_so_much_virtual_memory)

---

<div class="post-metadata">

### Author: ![Slava](https://avatars.discourse-cdn.com/v4/letter/s/b487fb/32.png) [@Slava](https://discuss.elastic.co/u/Slava)
#### Post date: [October 6, 2016, 12:37pm UTC](https://discuss.elastic.co/t/filebeat-exe-high-ram-usage/62254/6 "2016-10-06T12:37:31Z")

</div>

Is it expected? Here is another example. After 1 week filebeat.exe has been grown up. It uses more than 400MB now. Usually it uses less than 10MB.  
 ![](https://us1.discourse-cdn.com/elastic/original/2X/d/d269b4f297823b0fc0c62c7f35e4a99578f85be6.PNG)

---

<div class="post-metadata">

### Author: ![andrewkroh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andrewkroh/32/3784_2.png) [@andrewkroh](https://discuss.elastic.co/u/andrewkroh)
#### Post date: [October 6, 2016, 12:41pm UTC](https://discuss.elastic.co/t/filebeat-exe-high-ram-usage/62254/7 "2016-10-06T12:41:41Z")

</div>

~400MB seems high. What version of Filebeat are you running? What does your config look like? Is there anything interesting in the log file?

Filebeat supports generation of a memory profile using -memprofile . Can you run filebeat with this setting and share the generated profile with us?

---

<div class="post-metadata">

### Author: ![flodense](https://avatars.discourse-cdn.com/v4/letter/f/5f8ce5/32.png) [@flodense](https://discuss.elastic.co/u/flodense)
#### Post date: [October 20, 2016, 5:37pm UTC](https://discuss.elastic.co/t/filebeat-exe-high-ram-usage/62254/8 "2016-10-20T17:37:56Z")

</div>

I am experiencing a similar issue with filebeat-1.2.3 on centos7.

The log file that is being tracked reaches a maximum size of about 9.6MB and rotates out every couple days.

At startup, filebeat will start using 200-300MB of memory and over the course of 10-15 minutes will ramp up to as much as 900MB.

Attached you'll find my filebeat.yml as well as a memprofile from about a 10 minute period of the filebeat process running.

 ![](https://us1.discourse-cdn.com/elastic/original/2X/1/1980cc77244f4214cfcf2476dc0c185f107248c6.png)

 ![](https://us1.discourse-cdn.com/elastic/original/2X/8/8f4f49218618085396467d257ade2afb0f0bfa57.png)

---

<div class="post-metadata">

### Author: ![tudor](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tudor/32/3753_2.png) [@tudor](https://discuss.elastic.co/u/tudor)
#### Post date: [October 21, 2016, 11:05am UTC](https://discuss.elastic.co/t/filebeat-exe-high-ram-usage/62254/9 "2016-10-21T11:05:06Z")

</div>

@flodense Can you open a new topic, please? The original thread was on Windows. Please also post the `top` line, or similar, for Filebeat.

---

<div class="post-metadata">

### Author: ![flodense](https://avatars.discourse-cdn.com/v4/letter/f/5f8ce5/32.png) [@flodense](https://discuss.elastic.co/u/flodense)
#### Post date: [October 24, 2016, 3:41pm UTC](https://discuss.elastic.co/t/filebeat-exe-high-ram-usage/62254/10 "2016-10-24T15:41:46Z")

</div>

@tudor Done. For reference [https://discuss.elastic.co/t/filebeat-memory-usage-linux/63772/1](https://discuss.elastic.co/t/filebeat-memory-usage-linux/63772/1)

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [October 26, 2016, 10:33am UTC](https://discuss.elastic.co/t/filebeat-exe-high-ram-usage/62254/11 "2016-10-26T10:33:08Z")

</div>

This topic was automatically closed after 21 days. New replies are no longer allowed.
