# Monitor Filebeat Activity

**URL:** <https://discuss.elastic.co/t/monitor-filebeat-activity/71356>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [January 12, 2017, 11:00am UTC](https://discuss.elastic.co/t/monitor-filebeat-activity/71356 "2017-01-12T11:00:57Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![muhamadli302](https://avatars.discourse-cdn.com/v4/letter/m/b4bc9f/32.png) [@muhamadli302](https://discuss.elastic.co/u/muhamadli302)\
**Post date:** [January 12, 2017, 11:00am UTC](https://discuss.elastic.co/t/monitor-filebeat-activity/71356/1 "2017-01-12T11:00:57Z")

</div>

Hello,

I'm using filebeat to ship logs to logstash, and I want to know when it has finished shipping logs.  
Is there a way to check when:  
a) Filebeat has finished reading the log file (it's a static file, meaning it doesn't change or grow) and finished shipping  
OR  
b) Logstash has stopped receiving data from filebeat? (Assuming I don't have a network problem)

Thanks

---

<div class="post-metadata">

**Author:** ![jakommo](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jakommo/32/6716_2.png) [@jakommo](https://discuss.elastic.co/u/jakommo)\
**Post date:** [January 12, 2017, 11:16am UTC](https://discuss.elastic.co/t/monitor-filebeat-activity/71356/2 "2017-01-12T11:16:12Z")

</div>

Hi @muhamadli302,

as for a), Filebeat is designed to continuously read a file and does not "shutdown" when the file is finished as it expects new lines coming in. You might be able to see it has stopped reading a file in the logs if you up the logging level.

for b), since 5.0 Logstash has an API and you should be able to use the [\_node/stats/pipeline API](https://www.elastic.co/guide/en/logstash/current/node-stats-api.html#pipeline-stats) to see when no more events are coming in.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [February 9, 2017, 11:16am UTC](https://discuss.elastic.co/t/monitor-filebeat-activity/71356/3 "2017-02-09T11:16:21Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.