Filebeat is not closig the file descriptor, when the file is deleted/renamed

swethamahesh · January 17, 2018, 4:00am

Hi,

We didnt had any conclusion on the file descriptor is hanging.

FYI: https://discuss.elastic.co/t/filebeat-is-not-closig-the-file-descriptor-once-the-file-is-deleted-
renamed/104077

Request to provide some solution on how to go about the file descriptor being hanged.

Thanks,
Swetha. M

exekias · January 17, 2018, 10:24am

Could you share the logs of filebeat for the period where you do the file renaming? Please run it with these parameters: -d prospector -v

steffens · January 19, 2018, 4:42pm

Filebeat is not closing files, cause it hasn't finished processing them yet. There are a number of close options per prospector. If filebeat is blocked by stale outputs, the most aggressive is close_timeout, which force kills a harvester (file reading process) every N seconds.

system · February 16, 2018, 4:43pm

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.