# Logstash Log File is Filling Up Disk

**URL:** <https://discuss.elastic.co/t/logstash-log-file-is-filling-up-disk/55760>\
**Category:** Logstash\
**Created:** [July 18, 2016, 12:47pm UTC](https://discuss.elastic.co/t/logstash-log-file-is-filling-up-disk/55760 "2016-07-18T12:47:06Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Rohit\_Singh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/rohit_singh/32/46630_2.png) [@Rohit\_Singh](https://discuss.elastic.co/u/Rohit_Singh)\
**Post date:** [July 18, 2016, 12:47pm UTC](https://discuss.elastic.co/t/logstash-log-file-is-filling-up-disk/55760/1 "2016-07-18T12:47:06Z")

</div>

Hi, we are using logstash, to forward the logs of docker container with the help of filebeat.  
However, after 4 days of running the node's disk becomes full which is running logstash container.  
On debugging found out that, logstash.log file size which contains the processing information of logstash had increased in GB's. We have verbose logging enabled, which is an requirement. Is there any log rotation policy available, if yes, how can it be configured.

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [July 19, 2016, 3:20pm UTC](https://discuss.elastic.co/t/logstash-log-file-is-filling-up-disk/55760/2 "2016-07-19T15:20:30Z")

</div>

Logstash has not built-in log rotation, so you'll want to use the standard logrotate tool for that. You may have to restart Logstash for it to understand that the log was rotated and that the log file needs to be reopened.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 4:47am UTC](https://discuss.elastic.co/t/logstash-log-file-is-filling-up-disk/55760/3 "2017-07-06T04:47:26Z")

</div>


