# Filebeat harvesting

**URL:** <https://discuss.elastic.co/t/filebeat-harvesting/291514>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [December 11, 2021, 5:53pm UTC](https://discuss.elastic.co/t/filebeat-harvesting/291514 "2021-12-11T17:53:24Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![sahere37](https://avatars.discourse-cdn.com/v4/letter/s/b2d939/32.png) [@sahere37](https://discuss.elastic.co/u/sahere37)\
**Post date:** [December 11, 2021, 5:53pm UTC](https://discuss.elastic.co/t/filebeat-harvesting/291514/1 "2021-12-11T17:53:24Z")

</div>

Hi all  
I am using filebeat to harvest logs and send data to Elasticsearch.  
It is noted that log4net is used to create log and log will rotate by size for example in 10m, when log.log size received to 10m, the current log.log will be renamed and a new log.log will be created.  
The filebeat input is as following:

C:\log\log.log

filebeat will harvest current log.log file and send to Elasticsearch, but when log.log renamed to for example log1.log and a new log.log created, filebeat doesn't harvest the new logs. It means it cannot harvest the logs of new log.log file.  
How can I handle this issue? It means how can configure filebeat so that harvest data of new created log file

---

<div class="post-metadata">

**Author:** ![legoguy1000](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/legoguy1000/32/54301_2.png) [@legoguy1000](https://discuss.elastic.co/u/legoguy1000)\
**Post date:** [December 11, 2021, 10:04pm UTC](https://discuss.elastic.co/t/filebeat-harvesting/291514/2 "2021-12-11T22:04:31Z")

</div>

Does Filebeat show any errors? Can u post ur config and the output from Filebeat? Filebeat shouldn't have any issues with rolling files.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [January 9, 2022, 12:04am UTC](https://discuss.elastic.co/t/filebeat-harvesting/291514/3 "2022-01-09T00:04:56Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
