# Filebeat hold already deleted files
**URL:** https://discuss.elastic.co/t/filebeat-hold-already-deleted-files/64019
**Category:** Beats
**Tags:** filebeat
**Created:** [October 26, 2016, 2:42pm UTC](https://discuss.elastic.co/t/filebeat-hold-already-deleted-files/64019 "2016-10-26T14:42:33Z")
**Posts on this page:** 3
**Page:** 1
### Author:  [@aryaray](https://discuss.elastic.co/u/aryaray)
#### Post date: [October 26, 2016, 2:42pm UTC](https://discuss.elastic.co/t/filebeat-hold-already-deleted-files/64019/1 "2016-10-26T14:42:33Z")
I am using filebeat version 1.2.0 . I am checking that Filebeat hold already deleted process ,and that' create a disk space issue . when I kill those process then it's working but after 1-2 it's again occupied space by deleted process .
Below is mine filebeat configuration
> filebeat:
>
> # List of prospectors to fetch data.
>
> prospectors:
> # Each - is a prospector. Below are the prospector specific configurations
> -
> - /mnt/local/logs/info.log
> input\_type: log
> include\_lines: ["test","test1"]
> ignore\_older: 10m
> close\_older: 5m
> harvester\_buffer\_size: 163840
> max\_bytes: 1700
> force\_close\_files: true
> spool\_size: 256
> registry\_file: /var/lib/filebeat/registry
I also change once close ignore\_older and force\_close\_files but after 5 hours see the same issues coming .
When I Check
> lsof | grep deleted
> tail 1357 arya 2u REG 202,1 7263 18724 /tmp/tmpf7yvf0J (deleted)
> tail 1357 arya 5r REG 252,0 2621446786 2097360 /mnt/local/logs/info-10-26-16-11-1.log (deleted)
> filebeat 14225 root 13r REG 252,0 2621442335 3932165 /mnt/local/logs/info-10-26-16-15-39.log (deleted)
> filebeat 14225 14229 root 13r REG 252,0 2621442335 3932165 /mnt/local/logs/info-10-26-16-15-39.log (deleted)
> filebeat 14225 14230 root 13r REG 252,0 2621442335 3932165 /mnt/local/logs/info-10-26-16-15-39.log (deleted)
> filebeat 14225 14231 root 13r REG 252,0 2621442335 3932165 /mnt/local/logs/info-10-26-16-15-39.log (deleted)
> filebeat 14225 14232 root 13r REG 252,0 2621442335 3932165 /mnt/local/logs/info-10-26-16-15-39.log (deleted)
Some time also need to kill tail process with filebeat to getting actual space . Please help
---
### Author:  [@ruflin](https://discuss.elastic.co/u/ruflin)
#### Post date: [October 26, 2016, 8:44pm UTC](https://discuss.elastic.co/t/filebeat-hold-already-deleted-files/64019/2 "2016-10-26T20:44:56Z")
There are some known issues in the 1.2 release that can cause this. Easiest solution for the problem is to update filebeat to 5.0.0: [https://www.elastic.co/downloads/beats/filebeat](https://www.elastic.co/downloads/beats/filebeat)
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [November 16, 2016, 2:42pm UTC](https://discuss.elastic.co/t/filebeat-hold-already-deleted-files/64019/3 "2016-11-16T14:42:44Z")
This topic was automatically closed after 21 days. New replies are no longer allowed.