# \[Solved\] - Force filebeat to reship file

**URL:** https://discuss.elastic.co/t/solved-force-filebeat-to-reship-file/44415
**Category:** Beats
**Tags:** filebeat
**Created:** [March 15, 2016, 9:53am UTC](https://discuss.elastic.co/t/solved-force-filebeat-to-reship-file/44415 "2016-03-15T09:53:39Z")
**Posts on this page:** 5
**Page:** 1

<div class="post-metadata">

### Author: ![mikula](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mikula/32/8932_2.png) [@mikula](https://discuss.elastic.co/u/mikula)
#### Post date: [March 15, 2016, 9:53am UTC](https://discuss.elastic.co/t/solved-force-filebeat-to-reship-file/44415/1 "2016-03-15T09:53:39Z")

</div>

Hello,  
how to force filebeat to ship files again?  
I tried to stop service, remove registry file, touch log files (even to append dummy line) but no luck.  
2016-03-15T10:52:58+01:00 DBG Check file for harvesting: /elastic/torque-accounting/20151227  
2016-03-15T10:52:58+01:00 DBG Update existing file for harvesting: /elastic/torque-accounting/20151227  
...  
Thanks and have nice day  
AM

---

<div class="post-metadata">

### Author: ![ruflin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ruflin/32/3116_2.png) [@ruflin](https://discuss.elastic.co/u/ruflin)
#### Post date: [March 18, 2016, 8:22am UTC](https://discuss.elastic.co/t/solved-force-filebeat-to-reship-file/44415/2 "2016-03-18T08:22:05Z")

</div>

There is a so called registrar file with the name `.filebeat`. Depending on your OS and config it is stored in a different place. Inside this file, the state of all harvested file is stored. Removing this file will restart harvesting all files from scratch! Before removing the file, filebeat must be stopped.

---

<div class="post-metadata">

### Author: ![mikula](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mikula/32/8932_2.png) [@mikula](https://discuss.elastic.co/u/mikula)
#### Post date: [March 21, 2016, 11:24am UTC](https://discuss.elastic.co/t/solved-force-filebeat-to-reship-file/44415/3 "2016-03-21T11:24:55Z")

</div>

Ok thank you for reply

---

<div class="post-metadata">

### Author: ![Mr.King](https://avatars.discourse-cdn.com/v4/letter/m/bbe5ce/32.png) [@Mr.King](https://discuss.elastic.co/u/Mr.King)
#### Post date: [June 1, 2017, 8:11pm UTC](https://discuss.elastic.co/t/solved-force-filebeat-to-reship-file/44415/4 "2017-06-01T20:11:54Z")

</div>

Just for information and other who could wonder :  
with logstash 5.2 the file is stored here **/var/lib/filebeat/registry**

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 5, 2017, 9:49pm UTC](https://discuss.elastic.co/t/solved-force-filebeat-to-reship-file/44415/5 "2017-07-05T21:49:27Z")

</div>


