# Limiting log 'noise' due inactive log files

**URL:** https://discuss.elastic.co/t/limiting-log-noise-due-inactive-log-files/356160
**Category:** Beats
**Tags:** filebeat
**Created:** [March 26, 2024, 9:56am UTC](https://discuss.elastic.co/t/limiting-log-noise-due-inactive-log-files/356160 "2024-03-26T09:56:12Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![stefws](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stefws/32/6442_2.png) [@stefws](https://discuss.elastic.co/u/stefws)
#### Post date: [March 26, 2024, 9:56am UTC](https://discuss.elastic.co/t/limiting-log-noise-due-inactive-log-files/356160/1 "2024-03-26T09:56:12Z")

</div>

Got filebeat monitoring various test JBoss instance, only quite some log files remains empty for long periodes and filebeat watcher still monitors such, just in case events do sometime get written to various logs.

But in the meantime filebeat logs quite a lot of warnings like these:

```auto
{"log.level":"warn","@timestamp":"2024-03-26T10:38:52.844+0100","log.logger":"file_watcher","log.origin":{"file.name":"filestream/fswatch.go","file.line":204},"message":"file \"<redacted log path>\" has no content yet, skipping","service.name":"filebeat","ecs.version":"1.6.0"}
{"log.level":"warn","@timestamp":"2024-03-26T10:38:52.844+0100","log.logger":"file_watcher","log.origin":{"file.name":"filestream/fswatch.go","file.line":204},"message":"file \"<redacted log path>\" has no content yet, skipping","service.name":"filebeat","ecs.version":"1.6.0"}

```

Have been trying to fool around with these settings to lower such warnings, but it seems to continue:

```auto
  ignore_older: 25h
  close.on_state_change.inactive: 25h
  clean_inactive: 4h
  scan_frequency: 30s

```

Hints appreciated for lowering warning log rate for long time inactive logs, but still picking up potential new events of, TIA!

---

<div class="post-metadata">

### Author: ![Joscor](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/joscor/32/133567_2.png) [@Joscor](https://discuss.elastic.co/u/Joscor)
#### Post date: [April 16, 2024, 3:59pm UTC](https://discuss.elastic.co/t/limiting-log-noise-due-inactive-log-files/356160/2 "2024-04-16T15:59:13Z")

</div>

We observe the same issue and have customers complaining about it. We deploy on Red Hat OpenShift using the latest OpenShift and Elastic Operator version.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [May 14, 2024, 5:59pm UTC](https://discuss.elastic.co/t/limiting-log-noise-due-inactive-log-files/356160/3 "2024-05-14T17:59:32Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.