Filebeat is not closig the file descriptor, when the file is deleted/renamed

Elastic Stack Beats
1

Hi,

We didnt had any conclusion on the file descriptor is hanging.

FYI: https://discuss.elastic.co/t/filebeat-is-not-closig-the-file-descriptor-once-the-file-is-deleted-
renamed/104077

Request to provide some solution on how to go about the file descriptor being hanged.

Thanks,
Swetha. M

2

Hi @swethamahesh,

Could you share the logs of filebeat for the period where you do the file renaming? Please run it with these parameters: -d prospector -v

3

Filebeat is not closing files, cause it hasn't finished processing them yet. There are a number of close options per prospector. If filebeat is blocked by stale outputs, the most aggressive is close_timeout, which force kills a harvester (file reading process) every N seconds.

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.