It is written that filebeat keeps the state of the file it reads in the registry file. So, it should not send the same logs again and again, if the log file has not changed. I have added a cronjob which restarts filebeat every 5 minutes, so every 5 minutes, the same log data is being sent to the e…

Filebeat keeps sending same lines

vinceh (Vince) April 25, 2017, 4:38pm 4

Yes.

filebeat.full.yml is a complete configuration example. Everything in it
can be added to filebeat.yml.

Topic		Replies	Views
Filebeat sends same logs to Logstash on every restart Beats filebeat	4	688	June 30, 2020
Filebeat repeatedly sending old entries in log file Beats filebeat	3	3177	August 8, 2016
Filebeat sending the whole log again after stoping and starting filebeat container Beats filebeat	15	6454	November 14, 2018
Filebeat on Windows seem to not use the registry file Beats filebeat	13	4077	April 17, 2017
Filebeat resends log files after restart Beats filebeat	8	2101	July 12, 2022