# How do I reset the "file pointer" in filebeats

**URL:** https://discuss.elastic.co/t/how-do-i-reset-the-file-pointer-in-filebeats/49440
**Category:** Beats
**Created:** [May 6, 2016, 9:18pm UTC](https://discuss.elastic.co/t/how-do-i-reset-the-file-pointer-in-filebeats/49440 "2016-05-06T21:18:25Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![elastic1622](https://avatars.discourse-cdn.com/v4/letter/e/779978/32.png) [@elastic1622](https://discuss.elastic.co/u/elastic1622)
#### Post date: [May 6, 2016, 9:18pm UTC](https://discuss.elastic.co/t/how-do-i-reset-the-file-pointer-in-filebeats/49440/1 "2016-05-06T21:18:26Z")

</div>

Hello

I have filebeats forwarding logs to logstash/ELK. I have spent time developing, debugging, and getting visualizations up, and would now like to process all log files in their entirety once again. This is a similar problem to [http://stackoverflow.com/questions/19546900/how-to-force-logstash-to-reparse-a-file](http://stackoverflow.com/questions/19546900/how-to-force-logstash-to-reparse-a-file)

However, I think that I need to reset it in filebeat as opposed to logstash as I totally have cleaned out the ELK data and started fresh and I still don't see old logs.

So, the question is, how do I get filebeat to reparse all log files in entirety that it is watching?

Thanks  
Nick

---

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [May 7, 2016, 7:17am UTC](https://discuss.elastic.co/t/how-do-i-reset-the-file-pointer-in-filebeats/49440/2 "2016-05-07T07:17:00Z")

</div>

I think this is what you want - [https://www.elastic.co/guide/en/beats/filebeat/current/configuration-filebeat-options.html#\_registry\_file](https://www.elastic.co/guide/en/beats/filebeat/current/configuration-filebeat-options.html#_registry_file)

---

<div class="post-metadata">

### Author: ![elastic1622](https://avatars.discourse-cdn.com/v4/letter/e/779978/32.png) [@elastic1622](https://discuss.elastic.co/u/elastic1622)
#### Post date: [May 9, 2016, 3:16pm UTC](https://discuss.elastic.co/t/how-do-i-reset-the-file-pointer-in-filebeats/49440/3 "2016-05-09T15:16:52Z")

</div>

That's what I wanted...thanks.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 5, 2017, 9:52pm UTC](https://discuss.elastic.co/t/how-do-i-reset-the-file-pointer-in-filebeats/49440/4 "2017-07-05T21:52:12Z")

</div>


