# FileBeat updatable log

**URL:** https://discuss.elastic.co/t/filebeat-updatable-log/243565
**Category:** Beats
**Tags:** filebeat
**Created:** [August 3, 2020, 12:38pm UTC](https://discuss.elastic.co/t/filebeat-updatable-log/243565 "2020-08-03T12:38:13Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![vdmitrief](https://avatars.discourse-cdn.com/v4/letter/v/a8b319/32.png) [@vdmitrief](https://discuss.elastic.co/u/vdmitrief)
#### Post date: [August 3, 2020, 12:38pm UTC](https://discuss.elastic.co/t/filebeat-updatable-log/243565/1 "2020-08-03T12:38:13Z")

</div>

Need help configuring filebit ...  
One of my applications writes rotated logs to a file with a specified number of lines.  
If the file contains only 3 lines, then the log at the first moment of time will look like this:

```auto
1111
2222
3333

```

In the second time period, the next record will take the place of the first one and the log will look like this:

```auto
4444
2222
3333

```

At the third moment in time, the log will look like this

```auto
4444
5555
3333

```

And so on...

The original file name remains unchanged, only the modification time of the file changes.  
The problem is that after reading this file for the first time, the filebit no longer monitors it and no updated data is received.  
Here is my current FileBeat input configuration:

```auto
filebeat.inputs:
 - type: log
   tags: ["myapp"]
   enabled: true
   paths:
    - C:\myapplogs\1.log

```

Can anyone please help how to properly configure the filebit to collect such a file?

---

<div class="post-metadata">

### Author: ![kvch](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kvch/32/72058_2.png) [@kvch](https://discuss.elastic.co/u/kvch)
#### Post date: [August 11, 2020, 2:45pm UTC](https://discuss.elastic.co/t/filebeat-updatable-log/243565/2 "2020-08-11T14:45:57Z")

</div>

Unfortunately, this log rotation method is not supported by Filebeat at the moment.  
The only workaround that comes to my mind is that you could delete manually the entry about the file in the registry after every logrotation. Does that work for you?

---

<div class="post-metadata">

### Author: ![vdmitrief](https://avatars.discourse-cdn.com/v4/letter/v/a8b319/32.png) [@vdmitrief](https://discuss.elastic.co/u/vdmitrief)
#### Post date: [August 13, 2020, 11:15am UTC](https://discuss.elastic.co/t/filebeat-updatable-log/243565/3 "2020-08-13T11:15:28Z")

</div>

thanks,  
it doesn't work for me !  
I'll try to make sending logs by a custom script...

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [September 10, 2020, 1:15pm UTC](https://discuss.elastic.co/t/filebeat-updatable-log/243565/4 "2020-09-10T13:15:34Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.