# Log files are missing/deleted during log rotation

**URL:** <https://discuss.elastic.co/t/log-files-are-missing-deleted-during-log-rotation/184493>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [June 6, 2019, 4:59am UTC](https://discuss.elastic.co/t/log-files-are-missing-deleted-during-log-rotation/184493 "2019-06-06T04:59:42Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Sharath\_Thrishuleshw](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sharath_thrishuleshw/32/47597_2.png) [@Sharath\_Thrishuleshw](https://discuss.elastic.co/u/Sharath_Thrishuleshw)\
**Post date:** [June 6, 2019, 4:59am UTC](https://discuss.elastic.co/t/log-files-are-missing-deleted-during-log-rotation/184493/1 "2019-06-06T04:59:43Z")

</div>

When using filebeat version 7.0.0, the latest log files are missing after rotation.

I am using logback + slf4j for logging, log rotation in tomcat  
This does not happen always, but randomly  
When not running filebeat I am not facing this problem

This always happens during log rotation  
Following is my logback configuration

```
<appender name="FILE"
	class="ch.qos.logback.core.rolling.RollingFileAppender">
	<append>true</append>
	<File>${yyy}/logs/xxx.log</File>

	<rollingPolicy class="ch.qos.logback.core.rolling.FixedWindowRollingPolicy">
		<fileNamePattern>${yyy}/logs/xxx.log.%i.zip
		</fileNamePattern>
		<minIndex>1</minIndex>
		<maxIndex>10</maxIndex>
	</rollingPolicy>
	<triggeringPolicy
		class="ch.qos.logback.core.rolling.SizeBasedTriggeringPolicy">
		<maxFileSize>100MB</maxFileSize>
	</triggeringPolicy>
	<encoder>
		<pattern>[%d{yyyy-MM-dd HH:mm:ss.SSS}][%level][%thread][%contextName][%class][%M][%msg]%n</pattern>
	</encoder>
</appender>
<appender name="Async-Appender" class="ch.qos.logback.classic.AsyncAppender">
	<appender-ref ref="FILE" />
	<includeCallerData>true</includeCallerData>
</appender>

```

Following is my filbeat configuration

- type: log  
enabled: true  
paths:
  - C:\yyy\xxx.log  
fields:  
type: xxx  
document\_type: xxx\_log  
tail\_files: true  
multiline.pattern: '^['  
multiline.negate: true  
multiline.match: after

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 4, 2019, 4:59am UTC](https://discuss.elastic.co/t/log-files-are-missing-deleted-during-log-rotation/184493/2 "2019-07-04T04:59:47Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.