# Filebeat made my disk full in less than one day

**URL:** https://discuss.elastic.co/t/filebeat-made-my-disk-full-in-less-than-one-day/307856
**Category:** Elasticsearch
**Created:** [June 22, 2022, 9:17am UTC](https://discuss.elastic.co/t/filebeat-made-my-disk-full-in-less-than-one-day/307856 "2022-06-22T09:17:23Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![Khalifa\_Khalifi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/khalifa_khalifi/32/107364_2.png) [@Khalifa\_Khalifi](https://discuss.elastic.co/u/Khalifa_Khalifi)
#### Post date: [June 22, 2022, 9:17am UTC](https://discuss.elastic.co/t/filebeat-made-my-disk-full-in-less-than-one-day/307856/1 "2022-06-22T09:17:23Z")

</div>

Using filebeat made my disk full in less than one day!!! Is there any config I could apply to filebeat.yml to avoid this please? Using this tool is really dangerous. Prod servers are suddenly full for no reason.

---

<div class="post-metadata">

### Author: ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)
#### Post date: [June 22, 2022, 11:58am UTC](https://discuss.elastic.co/t/filebeat-made-my-disk-full-in-less-than-one-day/307856/2 "2022-06-22T11:58:21Z")

</div>

How much disk space do you have in the cluster?

How much data have you ingested?

What does your configuration look like?

What is the specification of your cluster?

What does your filebeat config look like?

Which version are you using?

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 20, 2022, 11:58am UTC](https://discuss.elastic.co/t/filebeat-made-my-disk-full-in-less-than-one-day/307856/3 "2022-07-20T11:58:53Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
