Filebeat Windows not shipping logs after restart

Hello. I use filebeat-6-6.0-windows_x86_64 and when I restart filebeat, it would not continue harvest files. It only start harvesting files when I delete registry file during restart. I turned the verbose loglevel on, and it says this over and over:

2019-04-03T16:03:07.542+0200 DEBUG [input] file/states.go:68 New state added for Y:\InformaticaServer\WorkflowLogs\MCampaign<logfile_name>.log
2019-04-03T16:03:07.543+0200 DEBUG [registrar] registrar/registrar.go:335 Registrar states cleaned up. Before: 67525, After: 67525, Pending: 0
2019-04-03T16:03:07.567+0200 DEBUG [registrar] registrar/registrar.go:400 Write registry file: I:\filebeat-6.6.0-windows-x86_64\data\registry
2019-04-03T16:03:07.980+0200 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":2359,"time":{"ms":2219}},"total":{"ticks":27577,"time":{"ms":26344},"value":27577},"user":{"ticks":25218,"time":{"ms":24125}}},"handles":{"open":163},"info":{"ephemeral_id":"17339076-67d1-4e81-af45-7b149a8f081a","uptime":{"ms":90478}},"memstats":{"gc_next":175638656,"memory_alloc":87954576,"memory_total":1809606672,"rss":100782080}},"filebeat":{"events":{"active":5,"added":57,"done":52},"harvester":{"open_files":0,"running":0}},"libbeat":{"config":{"module":{"running":0},"reloads":1},"pipeline":{"clients":1,"events":{"active":1,"filtered":56,"total":57}}},"registrar":{"states":{"current":67525,"update":53},"writes":{"success":52,"total":53}}}}}
2019-04-03T16:03:08.141+0200 DEBUG [registrar] registrar/registrar.go:393 Registry file updated. 67525 states written.
2019-04-03T16:03:08.141+0200 DEBUG [registrar] registrar/registrar.go:345 Processing 1 events
2019-04-03T16:03:08.141+0200 DEBUG [registrar] registrar/registrar.go:315 Registrar state updates processed. Count: 1
2019-04-03T16:03:08.157+0200 DEBUG [registrar] registrar/registrar.go:335 Registrar states cleaned up. Before: 67525, After: 67525, Pending: 0
2019-04-03T16:03:08.168+0200 DEBUG [acker] beater/acker.go:64 stateful ack {"count": 1}

Any ideas?

Hi buddy, I guess this thread ---> Filebeat error not sending logs from this forum might help you out. :grinning:

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.