# Harvester started for file but not reading logs

**URL:** <https://discuss.elastic.co/t/harvester-started-for-file-but-not-reading-logs/187062>\
**Category:** Beats\
**Created:** [June 24, 2019, 7:02am UTC](https://discuss.elastic.co/t/harvester-started-for-file-but-not-reading-logs/187062 "2019-06-24T07:02:13Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Vaibhav\_Kumar\_Jain](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vaibhav_kumar_jain/32/46559_2.png) [@Vaibhav\_Kumar\_Jain](https://discuss.elastic.co/u/Vaibhav_Kumar_Jain)\
**Post date:** [June 24, 2019, 7:02am UTC](https://discuss.elastic.co/t/harvester-started-for-file-but-not-reading-logs/187062/1 "2019-06-24T07:02:13Z")

</div>

--------------------filebeat.log-----------------------

2019-06-24T12:26:31.687+0530 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":375},"total":{"ticks":890,"time":{"ms":15},"value":890},"user":{"ticks":515,"time":{"ms":15}}},"handles":{"open":218},"info":{"ephemeral\_id":"82de4b08-58f5-44c6-ba79-63aaa0947d2a","uptime":{"ms":450131}},"memstats":{"gc\_next":4362160,"memory\_alloc":2375936,"memory\_total":10982776,"rss":-69632}},"filebeat":{"harvester":{"open\_files":2,"running":2}},"libbeat":{"config":{"module":{"running":0}},"pipeline":{"clients":4,"events":{"active":0}}},"registrar":{"states":{"current":7}}}}}  
2019-06-24T12:26:36.953+0530 INFO log/harvester.go:279 File is inactive: C:\inetpub\logs\LogFiles\W3SVC1\u\_ex190620.log. Closing because close\_inactive of 5m0s reached.  
2019-06-24T12:26:41.947+0530 INFO log/harvester.go:254 Harvester started for file: C:\inetpub\logs\LogFiles\W3SVC1\u\_ex190620.log  
2019-06-24T12:27:01.701+0530 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":375,"time":{"ms":15}},"total":{"ticks":906,"time":{"ms":31},"value":906},"user":{"ticks":531,"time":{"ms":16}}},"handles":{"open":220},"info":{"ephemeral\_id":"82de4b08-58f5-44c6-ba79-63aaa0947d2a","uptime":{"ms":480131}},"memstats":{"gc\_next":4362160,"memory\_alloc":2670896,"memory\_total":11277736,"rss":110592}},"filebeat":{"events":{"added":4,"done":4},"harvester":{"closed":2,"open\_files":2,"running":2,"started":2}},"libbeat":{"config":{"module":{"running":0}},"pipeline":{"clients":4,"events":{"active":0,"filtered":4,"total":4}}},"registrar":{"states":{"current":7,"update":4},"writes":{"success":4,"total":4}}}}}  
2019-06-24T12:27:31.695+0530 INFO [monitoring] log/log.go:144 Non-zero metrics in the last 30s {"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":406,"time":{"ms":16}},"total":{"ticks":952,"time":{"ms":31},"value":952},"user":{"ticks":546,"time":{"ms":15}}},"handles":{"open":220},"info":{"ephemeral\_id":"82de4b08-58f5-44c6-ba79-63aaa0947d2a","uptime":{"ms":510280}},"memstats":{"gc\_next":4362160,"memory\_alloc":2825392,"memory\_total":11432232,"rss":-16384}},"filebeat":{"harvester":{"open\_files":2,"running":2}},"libbeat":{"config":{"module":{"running":0}},"pipeline":{"clients":4,"events":{"active":0}}},"registrar":{"states":{"current":7}}}}}

--------infinite loop

----------------filebeat.yml---------------------  
filebeat.config.modules:  
path: "${path.config}/modules.d/\*.yml"  
reload.enabled: false  
output.elasticsearch:  
hosts:  
- "192.168.75.16:9200"  
setup.kibana:  
host: "192.168.75.16:5601"  
setup.template.settings:  
index.number\_of\_shards: 1

------------------iis.yml------------------------  
module: iis  
access:  
enabled: true  
var.paths: ["C:\inetpub\logs\LogFiles\W3SVC1\*.log"]  
error:  
enabled: true

---

<div class="post-metadata">

**Author:** ![Michael\_Madden](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/michael_madden/32/46640_2.png) [@Michael\_Madden](https://discuss.elastic.co/u/Michael_Madden)\
**Post date:** [June 25, 2019, 2:01am UTC](https://discuss.elastic.co/t/harvester-started-for-file-but-not-reading-logs/187062/2 "2019-06-25T02:01:22Z")

</div>

Hello, thanks for reaching out. What are the timestamps and sizes of the files that correspond to this glob? I've seen instances where there are no current logs, and filebeat does not ship entries until new files have been generated?

`C:\inetpub\logs\LogFiles\W3SVC1\*.log`

---

<div class="post-metadata">

**Author:** ![Vaibhav\_Kumar\_Jain](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vaibhav_kumar_jain/32/46559_2.png) [@Vaibhav\_Kumar\_Jain](https://discuss.elastic.co/u/Vaibhav_Kumar_Jain)\
**Post date:** [June 25, 2019, 5:36am UTC](https://discuss.elastic.co/t/harvester-started-for-file-but-not-reading-logs/187062/3 "2019-06-25T05:36:47Z")

</div>

I am appending log entries manually in the log file for which harvester has started. but the filebeat logs are still showing "Non-zero metrics in the last 30s". After 5 minutes it is closing the file and opening the same file again

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 23, 2019, 7:40am UTC](https://discuss.elastic.co/t/harvester-started-for-file-but-not-reading-logs/187062/4 "2019-07-23T07:40:04Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.