# Filebeat stops at a certain time

**URL:** <https://discuss.elastic.co/t/filebeat-stops-at-a-certain-time/247979>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [September 9, 2020, 8:47am UTC](https://discuss.elastic.co/t/filebeat-stops-at-a-certain-time/247979 "2020-09-09T08:47:12Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![bornatalebi](https://avatars.discourse-cdn.com/v4/letter/b/e68b1a/32.png) [@bornatalebi](https://discuss.elastic.co/u/bornatalebi)\
**Post date:** [September 9, 2020, 8:47am UTC](https://discuss.elastic.co/t/filebeat-stops-at-a-certain-time/247979/1 "2020-09-09T08:47:12Z")

</div>

Hi,  
I have a filebeat with custom index for cisco logs.  
Here is my filebeat.yaml config:

```auto
    filebeat.inputs:
    - type: log
      enabled: true
      paths:
        - /var/log/*.log
        #- c:\programdata\elasticsearch\logs\*
      scan_frequency: 6s
    filebeat.config.modules:
      path: ${path.config}/modules.d/*.yml
      reload.enabled: false
      #reload.period: 10s
    setup.template.settings:
      index.number_of_shards: 1
    setup.kibana:
      host: "kibana:5601"
    output.elasticsearch:
      hosts: ["node-1:9200"]
      indices:
        - index: "cisco-beat-%{+yyyy.MM}"
          when.contains:
            event.module: "cisco"
      protocol: "https"
      ssl.certificate: "/etc/filebeat/filebeat/filebeat.crt"
      ssl.key: "/etc/filebeat/filebeat/filebeat.key"
      ssl.certificate_authorities:
        - /etc/filebeat/ca/ca.crt
      username: "elastic"
      password: " ***********"
      pipeline: geoip-info
    processors:
      - add_host_metadata: ~
      - add_cloud_metadata: ~
      - add_docker_metadata: ~
      - add_kubernetes_metadata: ~

```

But every day around 4:10 A.M cisco logs stop coming to elasticsearch. other modules are working fine.  
when I restart filebeat the cisco module starts working again.  
[Here](https://gist.github.com/bornatalebi/2ca727448c3e7f51245aaf68f994536b) are my filebeat logs around that time. these logs keep repeating nonstop until I restart filebeat. any idea why?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 7, 2020, 10:47am UTC](https://discuss.elastic.co/t/filebeat-stops-at-a-certain-time/247979/2 "2020-10-07T10:47:14Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.