# How long filebeat harvester will be alive by default?

**URL:** https://discuss.elastic.co/t/how-long-filebeat-harvester-will-be-alive-by-default/89170
**Category:** Beats
**Tags:** filebeat
**Created:** [June 13, 2017, 10:51am UTC](https://discuss.elastic.co/t/how-long-filebeat-harvester-will-be-alive-by-default/89170 "2017-06-13T10:51:17Z")
**Posts on this page:** 5
**Page:** 1

<div class="post-metadata">

### Author: ![Yaswanth](https://avatars.discourse-cdn.com/v4/letter/y/94ad74/32.png) [@Yaswanth](https://discuss.elastic.co/u/Yaswanth)
#### Post date: [June 13, 2017, 10:51am UTC](https://discuss.elastic.co/t/how-long-filebeat-harvester-will-be-alive-by-default/89170/1 "2017-06-13T10:51:17Z")

</div>

HI,

I used filebeat to get my logs from one server to another , usually my logs generation is slow. I want to know how long the filebeat harvester will be alive ? Is there any possible case where the filebeat harvester will go dead if logs are not coming for long time.

THANKS

---

<div class="post-metadata">

### Author: ![andrewkroh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andrewkroh/32/3784_2.png) [@andrewkroh](https://discuss.elastic.co/u/andrewkroh)
#### Post date: [June 14, 2017, 11:12pm UTC](https://discuss.elastic.co/t/how-long-filebeat-harvester-will-be-alive-by-default/89170/2 "2017-06-14T23:12:49Z")

</div>

Unless you configure [`ignore_older`](https://www.elastic.co/guide/en/beats/filebeat/current/configuration-filebeat-options.html) or `close_*` it should monitor the file until all the data in the file has been completely read and the file is removed.

---

<div class="post-metadata">

### Author: ![Yaswanth](https://avatars.discourse-cdn.com/v4/letter/y/94ad74/32.png) [@Yaswanth](https://discuss.elastic.co/u/Yaswanth)
#### Post date: [June 15, 2017, 2:27am UTC](https://discuss.elastic.co/t/how-long-filebeat-harvester-will-be-alive-by-default/89170/3 "2017-06-15T02:27:50Z")

</div>

Thanks @andrewkroh

> [@andrewkroh](#):
>
> file has been completely read and the file is removed

Is it includes until the file renamed too.  
Because in my scenario in filebeat.yml i given path like this for input prospector `/etc/today.log` . So, the filebeat read the `today.log` until the file is read totally and at the end of the day the file will be get rolled to `today.log-2017-06-14` and new log file will be created for today(i.e.today.log) . SO, I want to know whether the harvester will still running in the rolled over file or it get moved to new log file which generated today?

Thanks

---

<div class="post-metadata">

### Author: ![andrewkroh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andrewkroh/32/3784_2.png) [@andrewkroh](https://discuss.elastic.co/u/andrewkroh)
#### Post date: [June 15, 2017, 2:08pm UTC](https://discuss.elastic.co/t/how-long-filebeat-harvester-will-be-alive-by-default/89170/4 "2017-06-15T14:08:02Z")

</div>

You will need to ensure that Filebeat is configured to read `/path/to/logs/today*` if you want it to be able to continue following the log as it is rotated.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 13, 2017, 2:08pm UTC](https://discuss.elastic.co/t/how-long-filebeat-harvester-will-be-alive-by-default/89170/5 "2017-07-13T14:08:05Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.