Hello, We have just migrated to Elastic Stack 5.2. Filebeat version 5.2.1 We have filebeats running on Windows Server 2012 R2 and every time the filebeat service is restart all lines from all harvested logs gets send again. The registry file is updated (Can be seen from the modification time of …

Filebeat on Windows seem to not use the registry file

andrewkroh (Andrew Kroh) March 16, 2017, 3:39pm 11

@ruflin Another similar issue: Duplicate events with Filebeat on windows on service restart

1 Like

Topic		Replies	Views
Filebeat 5.x install and file migration Beats filebeat	2	302	June 20, 2019
Filebeat appearing to update some of registry file, not all during 1.x>5.x upgrade Beats filebeat	3	788	May 28, 2018
Filebeat Windows not shipping logs after restart Beats filebeat	2	567	May 10, 2019
It doesn't seem to be doing anything Beats filebeat	2	980	June 23, 2016
Filebeat sending old logs on restart Beats filebeat	6	5931	July 5, 2017

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Filebeat on Windows seem to not use the registry file

Related topics