# Swap files are created on auditbeat FIM

**URL:** <https://discuss.elastic.co/t/swap-files-are-created-on-auditbeat-fim/199242>\
**Category:** Beats\
**Tags:** auditbeat\
**Created:** [September 12, 2019, 11:17am UTC](https://discuss.elastic.co/t/swap-files-are-created-on-auditbeat-fim/199242 "2019-09-12T11:17:51Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![zeno](https://avatars.discourse-cdn.com/v4/letter/z/57b2e6/32.png) [@zeno](https://discuss.elastic.co/u/zeno)\
**Post date:** [September 12, 2019, 11:17am UTC](https://discuss.elastic.co/t/swap-files-are-created-on-auditbeat-fim/199242/1 "2019-09-12T11:17:51Z")

</div>

I have created this topic on swap files creation but not getting the response on this. all the questions and answers are on this link attached below. Please check & respond

Looking Forward

> [@How many swap files are created when you update a text file](https://discuss.elastic.co/t/how-many-swap-files-are-created-when-you-update-a-text-file/197625):
>
> I want to know how many swap files are created in kibana for Ubuntu server when you create a text file using nano. i see 4 swap files deleted when i deleted the text file i have created in Ubuntu. Similarly the no of swap files deleted data shown on kibana is more than no of file created E.g if abc.txt file is created. there are more than 1 swap files shown as created in kibana. I will really appreciate any help as i can't find the answer in google for this

---

<div class="post-metadata">

**Author:** ![cwurm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/cwurm/32/34882_2.png) [@cwurm](https://discuss.elastic.co/u/cwurm)\
**Post date:** [September 13, 2019, 8:13am UTC](https://discuss.elastic.co/t/swap-files-are-created-on-auditbeat-fim/199242/2 "2019-09-13T08:13:46Z")

</div>

@zeno Please do not create a new forum topic - let's keep discussions in the original one.

---

<div class="post-metadata">

**Author:** ![zeno](https://avatars.discourse-cdn.com/v4/letter/z/57b2e6/32.png) [@zeno](https://discuss.elastic.co/u/zeno)\
**Post date:** [September 14, 2019, 9:57pm UTC](https://discuss.elastic.co/t/swap-files-are-created-on-auditbeat-fim/199242/3 "2019-09-14T21:57:48Z")

</div>

Sure i'll delete this one as i created a new one because everyone stopped replying on the previous discussion

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 5, 2019, 9:57pm UTC](https://discuss.elastic.co/t/swap-files-are-created-on-auditbeat-fim/199242/4 "2019-10-05T21:57:48Z")

</div>

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.
