# Filebeat is always read file from beginning

**URL:** <https://discuss.elastic.co/t/filebeat-is-always-read-file-from-beginning/213563>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [January 2, 2020, 11:09am UTC](https://discuss.elastic.co/t/filebeat-is-always-read-file-from-beginning/213563 "2020-01-02T11:09:51Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![rguptarg](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rguptarg/32/60643_2.png) [@rguptarg](https://discuss.elastic.co/u/rguptarg)\
**Post date:** [January 2, 2020, 11:09am UTC](https://discuss.elastic.co/t/filebeat-is-always-read-file-from-beginning/213563/1 "2020-01-02T11:09:51Z")

</div>

HI Team,

I am using filebeat-7.3.2-1.x86\_64 for application log reading.

but all the time filebeat read log from starting, hence duplicate data is present in elastic

please suggest what configuration required?

---

<div class="post-metadata">

**Author:** ![Saravana\_Maadavan](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/saravana_maadavan/32/60232_2.png) [@Saravana\_Maadavan](https://discuss.elastic.co/u/Saravana_Maadavan)\
**Post date:** [January 4, 2020, 12:11pm UTC](https://discuss.elastic.co/t/filebeat-is-always-read-file-from-beginning/213563/2 "2020-01-04T12:11:51Z")

</div>

Hello @rguptarg,

Few parameters like clean\_inactive , scan\_frequency has to be tweaked. Also kindly check if there is any log rotation enabled or any cron for logFile renaming which might also cause these issues. Kindly do check the below link for more details of many attributes such as clean\_inactive , scan\_frequency, etc.

[https://www.elastic.co/guide/en/beats/filebeat/7.3/configuration-filebeat-options.html](https://www.elastic.co/guide/en/beats/filebeat/7.3/configuration-filebeat-options.html)

Cheers,  
Maadavan

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [February 1, 2020, 12:11pm UTC](https://discuss.elastic.co/t/filebeat-is-always-read-file-from-beginning/213563/3 "2020-02-01T12:11:55Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.