# Multiple entries for single file in sincedb

**URL:** https://discuss.elastic.co/t/multiple-entries-for-single-file-in-sincedb/252438
**Category:** Logstash
**Created:** [October 18, 2020, 2:43am UTC](https://discuss.elastic.co/t/multiple-entries-for-single-file-in-sincedb/252438 "2020-10-18T02:43:43Z")
**Posts on this page:** 1
**Showing post:** 8

<div class="post-metadata">

### Author: ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)
#### Post date: [October 18, 2020, 11:17pm UTC](https://discuss.elastic.co/t/multiple-entries-for-single-file-in-sincedb/252438/8 "2020-10-18T23:17:45Z")

</div>

Is it possible that prod has sincedb\_clean\_after set to a lower value?

To avoid repeatedly reading very old files the ignore\_older option might help.

You may be able to filter out old events using something like [this](https://discuss.elastic.co/t/logstash-filter-basted-on-log-file-age/241350/2). Although I doubt you can prevent the previous day's file being immediately re-read just after rotation.

---

_[View the full topic](https://discuss.elastic.co/t/multiple-entries-for-single-file-in-sincedb/252438)._