# Filebeat.yml is deleting frequently

**URL:** https://discuss.elastic.co/t/filebeat-yml-is-deleting-frequently/233662
**Category:** Beats
**Tags:** filebeat
**Created:** [May 21, 2020, 4:38am UTC](https://discuss.elastic.co/t/filebeat-yml-is-deleting-frequently/233662 "2020-05-21T04:38:23Z")
**Posts on this page:** 5
**Page:** 1

<div class="post-metadata">

### Author: ![suresh123](https://avatars.discourse-cdn.com/v4/letter/s/cdc98d/32.png) [@suresh123](https://discuss.elastic.co/u/suresh123)
#### Post date: [May 21, 2020, 4:38am UTC](https://discuss.elastic.co/t/filebeat-yml-is-deleting-frequently/233662/1 "2020-05-21T04:38:23Z")

</div>

Filebeat.yml is deleting frequently on client(machine) file system.

Can anyone please suggest and your help is appreciated.

---

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [May 21, 2020, 4:45am UTC](https://discuss.elastic.co/t/filebeat-yml-is-deleting-frequently/233662/2 "2020-05-21T04:45:19Z")

</div>

That's not something that Filebeat can do itself, something external must be removing it.

What if you setup Auditbeat to monitor that file?

---

<div class="post-metadata">

### Author: ![suresh123](https://avatars.discourse-cdn.com/v4/letter/s/cdc98d/32.png) [@suresh123](https://discuss.elastic.co/u/suresh123)
#### Post date: [May 21, 2020, 4:57am UTC](https://discuss.elastic.co/t/filebeat-yml-is-deleting-frequently/233662/3 "2020-05-21T04:57:55Z")

</div>

Thanks for prompt response.

I have installed elastic search, kibana and logsyash on one server and filebeat on another server.

In filebeat.yml provide logstash output for log aggrgation.

After some hours (8hr or 9hr) filebeat.yml and fields file were deleted.

---

<div class="post-metadata">

### Author: ![suresh123](https://avatars.discourse-cdn.com/v4/letter/s/cdc98d/32.png) [@suresh123](https://discuss.elastic.co/u/suresh123)
#### Post date: [May 22, 2020, 4:37pm UTC](https://discuss.elastic.co/t/filebeat-yml-is-deleting-frequently/233662/4 "2020-05-22T16:37:42Z")

</div>

External script was removed filebeat.

Issue was now resolved we can close the thread

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [June 19, 2020, 4:37pm UTC](https://discuss.elastic.co/t/filebeat-yml-is-deleting-frequently/233662/5 "2020-06-19T16:37:45Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.