# Log file rotation issue on Elasticsearch 6.7.0

**URL:** <https://discuss.elastic.co/t/log-file-rotation-issue-on-elasticsearch-6-7-0/176709>\
**Category:** Elasticsearch\
**Created:** [April 12, 2019, 11:24pm UTC](https://discuss.elastic.co/t/log-file-rotation-issue-on-elasticsearch-6-7-0/176709 "2019-04-12T23:24:44Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![vijayakrishna.rg](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vijayakrishna.rg/32/36798_2.png) [@vijayakrishna.rg](https://discuss.elastic.co/u/vijayakrishna.rg)\
**Post date:** [April 12, 2019, 11:24pm UTC](https://discuss.elastic.co/t/log-file-rotation-issue-on-elasticsearch-6-7-0/176709/1 "2019-04-12T23:24:44Z")

</div>

Elasticsearch version: 6.7.0

We have an issue with cluster log file rotation, it's creating log file every 10 mins and rolling the old one to \*.log.gz

i have below setting in log4j2.properties

appender.rolling.type = RollingFile  
appender.rolling.name = rolling  
appender.rolling.fileName = {sys:es.logs.base\_path}{sys:file.separator}{sys:es.logs.cluster\_name}.log appender.rolling.layout.type = PatternLayout appender.rolling.layout.pattern = [%d{ISO8601}][%-5p][%-25c{1.}] [%node\_name]%marker %.-10000m%n appender.rolling.filePattern = {sys:es.logs.base\_path}{sys:file.separator}{sys:es.logs.cluster\_name}-%d{yyyy-MM-dd}-%i.log.gz  
appender.rolling.policies.type = Policies  
appender.rolling.policies.time.type = TimeBasedTriggeringPolicy  
appender.rolling.policies.time.interval = 1  
appender.rolling.policies.time.modulate = true  
appender.rolling.policies.size.type = SizeBasedTriggeringPolicy  
appender.rolling.policies.size.size = 128MB  
appender.rolling.strategy.type = DefaultRolloverStrategy  
appender.rolling.strategy.fileIndex = nomax  
appender.rolling.strategy.action.type = Delete  
appender.rolling.strategy.action.basepath = {sys:es.logs.base\_path} appender.rolling.strategy.action.condition.type = IfFileName appender.rolling.strategy.action.condition.glob = {sys:es.logs.cluster\_name}-\*  
appender.rolling.strategy.action.condition.nested\_condition.type = IfAccumulatedFileSize  
appender.rolling.strategy.action.condition.nested\_condition.exceeds = 2GB  
appender.rolling.strategy.action.condition.nested\_condition.type = IfLastModified  
appender.rolling.strategy.action.condition.nested\_condition.age = 7D

it was working when we had Elasticsearch version 6.5.4 cluster, recently we have upgraded to 6.7.0 from then i see this issue, we have same configuration setting for log4j.properties file both clusters.

Someone please help what's wrong with my configuration, Thanks.

/var/log/elasticsearch

-rw-r--r--. 1 elasticsearch elasticsearch 2.4M Apr 12 05:02 escluster-elk-2019-04-12-87.log.gz  
-rw-r--r--. 1 elasticsearch elasticsearch 2.3M Apr 12 05:03 escluster-elk-2019-04-12-88.log.gz  
-rw-r--r--. 1 elasticsearch elasticsearch 2.3M Apr 12 05:05 escluster-elk-2019-04-12-89.log.gz  
-rw-r--r--. 1 elasticsearch elasticsearch 2.4M Apr 12 01:29 escluster-elk-2019-04-12-8.log.gz  
-rw-r--r--. 1 elasticsearch elasticsearch 2.3M Apr 12 05:06 escluster-elk-2019-04-12-90.log.gz  
-rw-r--r--. 1 elasticsearch elasticsearch 2.3M Apr 12 05:08 escluster-elk-2019-04-12-91.log.gz  
-rw-r--r--. 1 elasticsearch elasticsearch 2.4M Apr 12 05:09 escluster-elk-2019-04-12-92.log.gz  
-rw-r--r--. 1 elasticsearch elasticsearch 2.4M Apr 12 05:11 escluster-elk-2019-04-12-93.log.gz  
-rw-r--r--. 1 elasticsearch elasticsearch 2.3M Apr 12 05:12 escluster-elk-2019-04-12-94.log.gz  
-rw-r--r--. 1 elasticsearch elasticsearch 2.3M Apr 12 05:14 escluster-elk-2019-04-12-95.log.gz  
-rw-r--r--. 1 elasticsearch elasticsearch 2.3M Apr 12 05:15 escluster-elk-2019-04-12-96.log.gz  
-rw-r--r--. 1 elasticsearch elasticsearch 2.3M Apr 12 05:17 escluster-elk-2019-04-12-97.log.gz  
-rw-r--r--. 1 elasticsearch elasticsearch 2.4M Apr 12 05:18 escluster-elk-2019-04-12-98.log.gz  
-rw-r--r--. 1 elasticsearch elasticsearch 2.3M Apr 12 05:20 escluster-elk-2019-04-12-99.log.gz  
-rw-r--r--. 1 elasticsearch elasticsearch 2.5M Apr 12 01:32 escluster-elk-2019-04-12-9.log.gz  
-rw-r--r--. 1 elasticsearch elasticsearch 0 Apr 4 18:27 escluster-elk\_access.log  
-rw-r--r--. 1 elasticsearch elasticsearch 0 Apr 4 18:27 escluster-elk\_audit.log  
-rw-r--r--. 1 elasticsearch elasticsearch 7.4K Apr 12 20:51 escluster-elk\_deprecation.log  
-rw-r--r--. 1 elasticsearch elasticsearch 0 Apr 4 18:27 escluster-elk\_index\_indexing\_slowlog.log  
-rw-r--r--. 1 elasticsearch elasticsearch 0 Apr 4 18:27 escluster-elk\_index\_search\_slowlog.log  
-rw-r--r--. 1 elasticsearch elasticsearch 78M Apr 12 23:11 escluster-elk.log  
-rw-r--r--. 1 elasticsearch elasticsearch 65M Apr 7 13:40 gc.log.0  
-rw-r--r--. 1 elasticsearch elasticsearch 2.9M Apr 12 23:25 gc.log.0.current  
-rw-r--r--. 1 elasticsearch elasticsearch 65M Apr 9 20:25 gc.log.1  
-rw-r--r--. 1 elasticsearch elasticsearch 65M Apr 11 12:30 gc.log.2  
-rw-r--r--. 1 elasticsearch elasticsearch 15M Apr 11 20:53 gc.log.3.current

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 10, 2019, 11:24pm UTC](https://discuss.elastic.co/t/log-file-rotation-issue-on-elasticsearch-6-7-0/176709/2 "2019-05-10T23:24:44Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.