# FileBeat Sends the same file content again and again to logstash

**URL:** https://discuss.elastic.co/t/filebeat-sends-the-same-file-content-again-and-again-to-logstash/220681
**Category:** Beats
**Tags:** filebeat
**Created:** [February 24, 2020, 3:07pm UTC](https://discuss.elastic.co/t/filebeat-sends-the-same-file-content-again-and-again-to-logstash/220681 "2020-02-24T15:07:33Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![yassine](https://avatars.discourse-cdn.com/v4/letter/y/c89c15/32.png) [@yassine](https://discuss.elastic.co/u/yassine)
#### Post date: [February 24, 2020, 3:07pm UTC](https://discuss.elastic.co/t/filebeat-sends-the-same-file-content-again-and-again-to-logstash/220681/1 "2020-02-24T15:07:33Z")

</div>

Hi,  
I'm a beginner in filabeat.  
the filbeat resend the already sent data again to the same index. (every 10 s)

How can I solve this problem, please?  
any suggestions plzzz?  
version filebeat: 7.5.2-  
myconf is

filebeat.inputs:

- type: log  
enabled: true  
paths:
  - C:\Users\BOUR167\Desktop\cra\log\logtest\log1.log  
json.keys\_under\_root: true  
json.add\_error\_key: true

output.logstash:  
hosts: ["localhost:5044"]

logstahs conf:  
input  
{  
beats{  
port =\> 5044  
codec =\> "json"  
}

}

filter  
{  
mutate {  
rename =\> {"msg" =\> "message"}  
}

```
date 
{
    match => ["timestamp", "dd/MM/yyyy:HH:mm:ss Z"]
}

```

}

output  
{  
elasticsearch  
{   
hosts =\> "localhost:9200"  
index =\> "mantisjsonlog"  
}  
stdout{}  
}

---

<div class="post-metadata">

### Author: ![ChrsMark](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/chrsmark/32/55858_2.png) [@ChrsMark](https://discuss.elastic.co/u/ChrsMark)
#### Post date: [February 24, 2020, 3:44pm UTC](https://discuss.elastic.co/t/filebeat-sends-the-same-file-content-again-and-again-to-logstash/220681/2 "2020-02-24T15:44:02Z")

</div>

Hi!

Could you please format your configuration with triple ` please?

---

<div class="post-metadata">

### Author: ![yassine](https://avatars.discourse-cdn.com/v4/letter/y/c89c15/32.png) [@yassine](https://discuss.elastic.co/u/yassine)
#### Post date: [February 24, 2020, 3:48pm UTC](https://discuss.elastic.co/t/filebeat-sends-the-same-file-content-again-and-again-to-logstash/220681/3 "2020-02-24T15:48:35Z")

</div>

it's ok for you ?

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [March 23, 2020, 3:48pm UTC](https://discuss.elastic.co/t/filebeat-sends-the-same-file-content-again-and-again-to-logstash/220681/4 "2020-03-23T15:48:40Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
