# Log file still harvesting after uninstalling Filebeat,metricbeat,heartbeat

**URL:** <https://discuss.elastic.co/t/log-file-still-harvesting-after-uninstalling-filebeat-metricbeat-heartbeat/225555>\
**Category:** Beats\
**Tags:** elastic-stack-monitoring\
**Created:** [March 29, 2020, 2:08pm UTC](https://discuss.elastic.co/t/log-file-still-harvesting-after-uninstalling-filebeat-metricbeat-heartbeat/225555 "2020-03-29T14:08:37Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![gilang\_bilbisri](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/gilang_bilbisri/32/60770_2.png) [@gilang\_bilbisri](https://discuss.elastic.co/u/gilang_bilbisri)\
**Post date:** [March 29, 2020, 2:08pm UTC](https://discuss.elastic.co/t/log-file-still-harvesting-after-uninstalling-filebeat-metricbeat-heartbeat/225555/1 "2020-03-29T14:08:38Z")

</div>

Hi everyone.

Im sorry for my broken english  
Today I've been uninstalling every app on my machine to remake everything i have done.  
i've already to Uninstalling

> -Elasticsearch  
> -filebeat  
> -metricbeat  
> -heartbeat  
> -Kibana  
> -grafana

and then i've done to remove

```
/etc/
/var/lib/
/var/log/

```

this is just to make a sure,There is Nothing left on my machine.

but i have found some struggle things in my machine  
after i run

```
tail -f /var/log/messages

```

there's showing some running log from beats. and there is the log

> Mar 29 21:03:33 monitoring filebeat: 2020-03-29T21:03:33.991+0700#011INFO#011[monitoring]#011log/log.go:145#011Non-zero metrics in the last 30s#011{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":3870,"time":{"ms":8}},"total":{"ticks":7840,"time":{"ms":11},"value":7840},"user":{"ticks":3970,"time":{"ms":3}}},"handles":{"limit":{"hard":4096,"soft":1024},"open":9},"info":{"ephemeral\_id":"2d6c0694-ca20-4273-95bb-751bf546fc65","uptime":{"ms":17823158}},"memstats":{"gc\_next":9887552,"memory\_alloc":5898840,"memory\_total":185511128},"runtime":{"goroutines":16}},"filebeat":{"harvester":{"open\_files":0,"running":0}},"libbeat":{"config":{"module":{"running":0}},"pipeline":{"clients":0,"events":{"active":0}}},"registrar":{"states":{"current":0}},"system":{"load":{"1":0,"15":0.05,"5":0.01,"norm":{"1":0,"15":0.0063,"5":0.0013}}}}}}

anyone knows,how to make this harvesting logs being stoped?

FYI.  
i used centos 7 machine

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [March 29, 2020, 11:53pm UTC](https://discuss.elastic.co/t/log-file-still-harvesting-after-uninstalling-filebeat-metricbeat-heartbeat/225555/2 "2020-03-29T23:53:02Z")

</div>

What does `rpm -q| grep -i beat` return?

---

<div class="post-metadata">

**Author:** ![gilang\_bilbisri](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/gilang_bilbisri/32/60770_2.png) [@gilang\_bilbisri](https://discuss.elastic.co/u/gilang_bilbisri)\
**Post date:** [March 30, 2020, 12:34pm UTC](https://discuss.elastic.co/t/log-file-still-harvesting-after-uninstalling-filebeat-metricbeat-heartbeat/225555/3 "2020-03-30T12:34:29Z")

</div>

Thanks for your the respond.  
i Found the problem but this is last solution i have got.

i tried to delete every chace and every apps i doesnt need on my machine.  
then i reboot my machine and now, the logs never show up.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 27, 2020, 2:34pm UTC](https://discuss.elastic.co/t/log-file-still-harvesting-after-uninstalling-filebeat-metricbeat-heartbeat/225555/4 "2020-04-27T14:34:30Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.