Filebeat registry/log.json size keeps increasing though there are no new log entries in my application log

Elastic Stack Beats
1

Filebeat is making entry to log.json file even though are no new logs being added to my application log file.

Below is the excerpt of the log.json file

{"k":"filebeat::logs::native::670096-64768","v":{"ttl":-1,"FileStateOS":{"inode":670096,"device":64768},"identifier_name":"native","id":"native::670096-64768","prev_id":"","source":"/var/log/usr/local/application/backend.log","offset":987,"timestamp":[2319894680250,1694451381],"type":"log"}}
{"k":"filebeat::logs::native::670096-64768","v":{"id":"native::670096-64768","offset":987,"ttl":-1,"identifier_name":"native","FileStateOS":{"device":64768,"inode":670096},"prev_id":"","source":"/var/log/usr/local/application/backend.log","timestamp":[2319894680250,1694451381],"type":"log"}}
{"k":"filebeat::logs::native::670096-64768","v":{"source":"/var/log/usr/local/application/backend.log","ttl":-1,"identifier_name":"native","id":"native::670096-64768","prev_id":"","type":"log","FileStateOS":{"inode":670096,"device":64768},"offset":987,"timestamp":[2319894680250,1694451381]}}
{"k":"filebeat::logs::native::670096-64768","v":{"FileStateOS":{"inode":670096,"device":64768},"prev_id":"","timestamp":[2319894680250,1694451381],"offset":987,"ttl":-1,"type":"log","identifier_name":"native","id":"native::670096-64768","source":"/var/log/usr/local/application/backend.log"}}
{"k":"filebeat::logs::native::670096-64768","v":{"id":"native::670096-64768","source":"/var/log/usr/local/application/backend.log","timestamp":[2319894680250,1694451381],"ttl":-1,"type":"log","identifier_name":"native","prev_id":"","offset":987,"FileStateOS":{"inode":670096,"device":64768}}}
{"k":"filebeat::logs::native::670096-64768","v":{"id":"native::670096-64768","prev_id":"","ttl":-1,"FileStateOS":{"inode":670096,"device":64768},"identifier_name":"native","source":"/var/log/usr/local/application/backend.log","offset":987,"timestamp":[2319894680250,1694451381],"type":"log"}}
{"k":"filebeat::logs::native::670096-64768","v":{"source":"/var/log/usr/local/application/backend.log","timestamp":[2319894680250,1694451381],"identifier_name":"native","id":"native::670096-64768","prev_id":"","offset":987,"ttl":-1,"type":"log","FileStateOS":{"inode":670096,"device":64768}}}
{"k":"filebeat::logs::native::670096-64768","v":{"prev_id":"","source":"/var/log/usr/local/application/backend.log","offset":987,"ttl":-1,"FileStateOS":{"inode":670096,"device":64768},"id":"native::670096-64768","type":"log","identifier_name":"native","timestamp":[2319894680250,1694451381]}}

Please note:
I have read the following pages already and using the options specified in the page :

OS : CentOS Linux 7
Filebeat verion : 8.5.3

Desperately need help.

Thank You,
PALAN SK

2

Filebeat.yml config for the above log

- type: log
	enabled: true
	ignore_older: 24h
	close_inactive: 24h
	close_renamed: true
	close_removed: true
	paths:
		- /var/log/usr/local/application/backend.log
	multiline.pattern: '^[0-9]{4}-[0-9]{2}-[0-9]{2}'
	multiline.negate: true
	multiline.match: after
3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.