# Is there any way to find which files have been ingested by filebeat to logstash?

**URL:** <https://discuss.elastic.co/t/is-there-any-way-to-find-which-files-have-been-ingested-by-filebeat-to-logstash/107010>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [November 9, 2017, 9:58am UTC](https://discuss.elastic.co/t/is-there-any-way-to-find-which-files-have-been-ingested-by-filebeat-to-logstash/107010 "2017-11-09T09:58:02Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Jay\_Dabhi](https://avatars.discourse-cdn.com/v4/letter/j/8c91f0/32.png) [@Jay\_Dabhi](https://discuss.elastic.co/u/Jay_Dabhi)\
**Post date:** [November 9, 2017, 9:58am UTC](https://discuss.elastic.co/t/is-there-any-way-to-find-which-files-have-been-ingested-by-filebeat-to-logstash/107010/1 "2017-11-09T09:58:02Z")

</div>

Is there any way to find which files have been ingested by filebeat to logstash?

---

<div class="post-metadata">

**Author:** ![steffens](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/steffens/32/79630_2.png) [@steffens](https://discuss.elastic.co/u/steffens)\
**Post date:** [November 9, 2017, 4:21pm UTC](https://discuss.elastic.co/t/is-there-any-way-to-find-which-files-have-been-ingested-by-filebeat-to-logstash/107010/2 "2017-11-09T16:21:25Z")

</div>

filebeat sends the file name in it's events. As logstash is quite flexible it's up to you how you want to process these information.

Filebeat stores it's state about published files in it's registry file (JSON formatted). You can open and process this file with your own scripts.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 7, 2017, 4:22pm UTC](https://discuss.elastic.co/t/is-there-any-way-to-find-which-files-have-been-ingested-by-filebeat-to-logstash/107010/3 "2017-12-07T16:22:34Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.