# Files index being cleared

**URL:** <https://discuss.elastic.co/t/files-index-being-cleared/230625>\
**Category:** Elasticsearch\
**Created:** [April 30, 2020, 7:27pm UTC](https://discuss.elastic.co/t/files-index-being-cleared/230625 "2020-04-30T19:27:12Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![StrifeX](https://avatars.discourse-cdn.com/v4/letter/s/9e8a1a/32.png) [@StrifeX](https://discuss.elastic.co/u/StrifeX)\
**Post date:** [April 30, 2020, 7:27pm UTC](https://discuss.elastic.co/t/files-index-being-cleared/230625/1 "2020-04-30T19:27:12Z")

</div>

I'm not sure if this is the appropriate place to ask this question, but any assistance would be greatly appreciated. Our stack has is running fine (aside from a storage issue every so often). The issue I'm running into is that the files index is clearing out file (or docs I guess) after they are added. Using moloch, which pulls it's list of files from the files index, only a few files are listed.

However, when I sync the files that are actually on disk (of which there are many), the files do show up in the index. However, after about one minute, the index starts to remove documents, and continues to do so until only the few that were there before the sync remain. I can sync the files over and over again, but they are always removed after about a minute.

I don't think this is a moloch issue, as I watch the traffic from the moloch endpoint to the elastic instance, and while there was traffic for adding the files, there was no traffic involving the removal of the files.

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [April 30, 2020, 8:23pm UTC](https://discuss.elastic.co/t/files-index-being-cleared/230625/2 "2020-04-30T20:23:32Z")

</div>

What is the output of:

```auto
GET /
GET /_cat/nodes?v
GET /_cat/health?v
GET /_cat/indices?v

```

If some outputs are too big, please share them on [gist.github.com](http://gist.github.com) and link them here.

Which index has this problem?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 28, 2020, 8:28pm UTC](https://discuss.elastic.co/t/files-index-being-cleared/230625/3 "2020-05-28T20:28:15Z")

</div>

Closed on May 28, 2020, 8:28pm UTC

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
