# Filebeat Output error while using file

**URL:** <https://discuss.elastic.co/t/filebeat-output-error-while-using-file/49268>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [May 5, 2016, 8:22am UTC](https://discuss.elastic.co/t/filebeat-output-error-while-using-file/49268 "2016-05-05T08:22:57Z")\
**Posts on this page:** 11\
**Page:** 1

<div class="post-metadata">

**Author:** ![prakashkumar](https://avatars.discourse-cdn.com/v4/letter/p/b5ac83/32.png) [@prakashkumar](https://discuss.elastic.co/u/prakashkumar)\
**Post date:** [May 5, 2016, 8:22am UTC](https://discuss.elastic.co/t/filebeat-output-error-while-using-file/49268/1 "2016-05-05T08:22:57Z")

</div>

PS C:\Program Files\Filebeat\> ./filebeat -e -c filebeat0.yml -d "publish"  
2016/05/05 07:26:16.287762 geolite.go:24: INFO GeoIP disabled: No paths were set under output.geoip.paths  
2016/05/05 07:26:16.287762 logstash.go:106: INFO Max Retries set to: 3  
2016/05/05 07:26:16.292766 outputs.go:126: INFO Activated logstash as output plugin.  
2016/05/05 07:26:16.292766 publish.go:232: DBG Create output worker  
2016/05/05 07:26:16.292766 publish.go:274: DBG No output is defined to store the topology. The server fields might not  
be filled.  
2016/05/05 07:26:16.292766 publish.go:288: INFO Publisher name: akash  
2016/05/05 07:26:16.297770 async.go:78: INFO Flush Interval set to: 1s  
2016/05/05 07:26:16.297770 async.go:84: INFO Max Bulk Size set to: 2048  
2016/05/05 07:26:16.297770 async.go:92: DBG create bulk processing worker (interval=1s, bulk size=2048)  
2016/05/05 07:26:16.298770 beat.go:147: INFO Init Beat: filebeat; Version: 1.2.1  
2016/05/05 07:26:16.298770 beat.go:173: INFO filebeat sucessfully setup. Start running.  
2016/05/05 07:26:16.299771 registrar.go:66: INFO Registry file set to: C:\Program Files\Filebeat.filebeat  
2016/05/05 07:26:16.299771 registrar.go:76: INFO Loading registrar data from C:\Program Files\Filebeat.filebeat  
2016/05/05 07:26:16.332015 prospector.go:132: INFO Set ignore\_older duration to 0  
2016/05/05 07:26:16.332015 prospector.go:132: INFO Set close\_older duration to 1h0m0s  
2016/05/05 07:26:16.333016 prospector.go:132: INFO Set scan\_frequency duration to 10s  
2016/05/05 07:26:16.333016 prospector.go:89: INFO Invalid input type set:  
2016/05/05 07:26:16.333016 prospector.go:92: INFO Input type set to: log  
2016/05/05 07:26:16.333016 prospector.go:132: INFO Set backoff duration to 1s  
2016/05/05 07:26:16.333016 prospector.go:132: INFO Set max\_backoff duration to 10s  
2016/05/05 07:26:16.333016 prospector.go:112: INFO force\_close\_file is disabled  
2016/05/05 07:26:16.333016 prospector.go:132: INFO Set ignore\_older duration to 0  
2016/05/05 07:26:16.333016 prospector.go:132: INFO Set close\_older duration to 1h0m0s  
2016/05/05 07:26:16.334016 prospector.go:132: INFO Set scan\_frequency duration to 10s  
2016/05/05 07:26:16.334016 prospector.go:89: INFO Invalid input type set: err  
2016/05/05 07:26:16.334016 prospector.go:92: INFO Input type set to: log  
2016/05/05 07:26:16.334016 prospector.go:132: INFO Set backoff duration to 1s  
2016/05/05 07:26:16.334016 prospector.go:132: INFO Set max\_backoff duration to 10s  
2016/05/05 07:26:16.334016 prospector.go:112: INFO force\_close\_file is disabled  
2016/05/05 07:26:16.334016 prospector.go:142: INFO Starting prospector of type: log  
2016/05/05 07:26:16.333016 spooler.go:77: INFO Starting spooler: spool\_size: 2048; idle\_timeout: 5s  
2016/05/05 07:26:16.335018 prospector.go:142: INFO Starting prospector of type: log  
2016/05/05 07:26:16.356031 log.go:113: INFO Harvester started for file: c:\Users\akashsoni\Downloads\k\logstash-tutorial  
\tutorial\20160402000001.err  
2016/05/05 07:26:16.357032 log.go:113: INFO Harvester started for file: c:\Users\akashsoni\Downloads\k\logstash-tutorial  
\tutorial\20160402000101.err  
2016/05/05 07:26:16.358033 log.go:113: INFO Harvester started for file: c:\Users\akashsoni\Downloads\k\logstash-tutorial  
\tutorial\20160402000201.err  
2016/05/05 07:26:16.359033 log.go:113: INFO Harvester started for file: c:\Users\akashsoni\Downloads\k\logstash-tutorial  
\tutorial\20160402000401.err  
2016/05/05 07:26:16.359033 log.go:113: INFO Harvester started for file: c:\Users\akashsoni\Downloads\k\logstash-tutorial  
\tutorial\20160402000301.err  
2016/05/05 07:26:16.360034 log.go:113: INFO Harvester started for file: c:\Users\akashsoni\Downloads\k\logstash-tutorial  
\tutorial\20160402000601.err  
2016/05/05 07:26:16.360034 log.go:113: INFO Harvester started for file: c:\Users\akashsoni\Downloads\k\logstash-tutorial  
\tutorial\20160402000502.err  
2016/05/05 07:26:19.661256 crawler.go:78: INFO All prospectors initialised with 3064 states to persist  
2016/05/05 07:26:19.663256 registrar.go:83: INFO Starting Registrar  
2016/05/05 07:26:19.664257 publish.go:88: INFO Start sending events to output

This is my filebeat output : courser is blinking continuously but not showing output why ?  
when i use same code as i written above in filebeat config file with .log extension it will work fine.  
tomorrow this code is running for both err and log sup-rattly or together.

---

<div class="post-metadata">

**Author:** ![prakashkumar](https://avatars.discourse-cdn.com/v4/letter/p/b5ac83/32.png) [@prakashkumar](https://discuss.elastic.co/u/prakashkumar)\
**Post date:** [May 5, 2016, 8:27am UTC](https://discuss.elastic.co/t/filebeat-output-error-while-using-file/49268/2 "2016-05-05T08:27:03Z")

</div>

My filebeat0.yml  
filebeat:

## prospectors:

paths:

- c:/Users/akashsoni/Downloads/k/logstash-tutorial/tutorial/\*.log
- c:/Users/akashsoni/Downloads/k/logstash-tutorial/tutorial/\*.err

input\_type: log

registry\_file: "C:/ProgramData/filebeat/registry"

output:

logstash:  
hosts: ["localhost:5044"]  
shipper:

logging:

files:  
rotateeverybytes: 10485760 # = 10MB

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [May 5, 2016, 10:54pm UTC](https://discuss.elastic.co/t/filebeat-output-error-while-using-file/49268/3 "2016-05-05T22:54:50Z")

</div>

> [@prakashkumar](#):
>
> This is my filebeat output : courser is blinking continuously but not showing output why ?

What sort of output do you expect?

---

<div class="post-metadata">

**Author:** ![prakashkumar](https://avatars.discourse-cdn.com/v4/letter/p/b5ac83/32.png) [@prakashkumar](https://discuss.elastic.co/u/prakashkumar)\
**Post date:** [May 6, 2016, 5:25am UTC](https://discuss.elastic.co/t/filebeat-output-error-while-using-file/49268/4 "2016-05-06T05:25:26Z")

</div>

Transfer of data that what filebeat is sending,and i used publish command.

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [May 6, 2016, 5:37am UTC](https://discuss.elastic.co/t/filebeat-output-error-while-using-file/49268/5 "2016-05-06T05:37:51Z")

</div>

You only have the logstash output, you may want to look at [https://www.elastic.co/guide/en/beats/filebeat/current/console-output.html](https://www.elastic.co/guide/en/beats/filebeat/current/console-output.html)

---

<div class="post-metadata">

**Author:** ![prakashkumar](https://avatars.discourse-cdn.com/v4/letter/p/b5ac83/32.png) [@prakashkumar](https://discuss.elastic.co/u/prakashkumar)\
**Post date:** [May 6, 2016, 5:42am UTC](https://discuss.elastic.co/t/filebeat-output-error-while-using-file/49268/6 "2016-05-06T05:42:21Z")

</div>

shall i increase the size of buffer?

---

<div class="post-metadata">

**Author:** ![prakashkumar](https://avatars.discourse-cdn.com/v4/letter/p/b5ac83/32.png) [@prakashkumar](https://discuss.elastic.co/u/prakashkumar)\
**Post date:** [May 6, 2016, 5:44am UTC](https://discuss.elastic.co/t/filebeat-output-error-while-using-file/49268/7 "2016-05-06T05:44:23Z")

</div>

my logstash is also not giving output in elastic search.

---

<div class="post-metadata">

**Author:** ![prakashkumar](https://avatars.discourse-cdn.com/v4/letter/p/b5ac83/32.png) [@prakashkumar](https://discuss.elastic.co/u/prakashkumar)\
**Post date:** [May 6, 2016, 5:48am UTC](https://discuss.elastic.co/t/filebeat-output-error-while-using-file/49268/8 "2016-05-06T05:48:56Z")

</div>

Hi,

suppose I make one log file and send that file from filebeat to logstash and then to elasticsearch it works fine ,but when i remove the file from my elasticsearch ,then rerun with same file it will not show any output just my courser is blinking on filebeat side ,filebeat is ready to send but not send any data to logstash.Same problem with the logstash also.Why?

---

<div class="post-metadata">

**Author:** ![mnhan](https://avatars.discourse-cdn.com/v4/letter/m/8baadc/32.png) [@mnhan](https://discuss.elastic.co/u/mnhan)\
**Post date:** [May 6, 2016, 12:56pm UTC](https://discuss.elastic.co/t/filebeat-output-error-while-using-file/49268/9 "2016-05-06T12:56:39Z")

</div>

if you are going to resend the same file, you will need to remove the filebeat registry. it keeps track of what it already sent and will not send it again.

---

<div class="post-metadata">

**Author:** ![prakashkumar](https://avatars.discourse-cdn.com/v4/letter/p/b5ac83/32.png) [@prakashkumar](https://discuss.elastic.co/u/prakashkumar)\
**Post date:** [May 6, 2016, 1:04pm UTC](https://discuss.elastic.co/t/filebeat-output-error-while-using-file/49268/10 "2016-05-06T13:04:12Z")

</div>

Thankyou sir

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 5, 2017, 9:52pm UTC](https://discuss.elastic.co/t/filebeat-output-error-while-using-file/49268/11 "2017-07-05T21:52:19Z")

</div>


