# FileBeat file is falling under ignore older Part2

**URL:** <https://discuss.elastic.co/t/filebeat-file-is-falling-under-ignore-older-part2/62920>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [October 13, 2016, 9:16am UTC](https://discuss.elastic.co/t/filebeat-file-is-falling-under-ignore-older-part2/62920 "2016-10-13T09:16:58Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![il.bert](https://avatars.discourse-cdn.com/v4/letter/i/ac91a4/32.png) [@il.bert](https://discuss.elastic.co/u/il.bert)\
**Post date:** [October 13, 2016, 9:16am UTC](https://discuss.elastic.co/t/filebeat-file-is-falling-under-ignore-older-part2/62920/1 "2016-10-13T09:16:58Z")

</div>

@ruflin my old post has been closed if you reopen it I copy the answer there

[https://discuss.elastic.co/t/filebeat-file-is-falling-under-ignore-older/61210](https://discuss.elastic.co/t/filebeat-file-is-falling-under-ignore-older/61210)

You're right I pasted the wrong logs, anyway there where nothing usefull in ther, right now I removed all those conf, but FB sizes in memory is growing a lot, so I think a have to write them back.

However with this configuration I am still having EOF but **no duplicated lines!**

My situation is that I have about 20 prospector for 20 single files, each of them is rotated and renamed after it reach around 10MB. the renamed file can be closed and ignored. the newly created file (with the name specified in the prospector) should be started.  
i.e prospector start on myapp.log, after it reaches 10 MB it is renamed in myapp20161013111000.log and a new myapp.log starts

I want to keep my prospector active only on the main log not the older renamed files

---

<div class="post-metadata">

**Author:** ![ruflin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ruflin/32/3116_2.png) [@ruflin](https://discuss.elastic.co/u/ruflin)\
**Post date:** [October 13, 2016, 11:31am UTC](https://discuss.elastic.co/t/filebeat-file-is-falling-under-ignore-older-part2/62920/2 "2016-10-13T11:31:21Z")

</div>

I reopened the other topic. Lets continue the discussion there.

---

<div class="post-metadata">

**Author:** ![il.bert](https://avatars.discourse-cdn.com/v4/letter/i/ac91a4/32.png) [@il.bert](https://discuss.elastic.co/u/il.bert)\
**Post date:** [October 13, 2016, 12:18pm UTC](https://discuss.elastic.co/t/filebeat-file-is-falling-under-ignore-older-part2/62920/3 "2016-10-13T12:18:34Z")

</div>

thanks, i moved the answer there 🙂

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 3, 2016, 9:17am UTC](https://discuss.elastic.co/t/filebeat-file-is-falling-under-ignore-older-part2/62920/4 "2016-11-03T09:17:06Z")

</div>

This topic was automatically closed after 21 days. New replies are no longer allowed.
