# What happened to filebeat?

**URL:** <https://discuss.elastic.co/t/what-happened-to-filebeat/121179>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [February 23, 2018, 8:02am UTC](https://discuss.elastic.co/t/what-happened-to-filebeat/121179 "2018-02-23T08:02:22Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![Feng\_Mi](https://avatars.discourse-cdn.com/v4/letter/f/54ee81/32.png) [@Feng\_Mi](https://discuss.elastic.co/u/Feng_Mi)\
**Post date:** [February 23, 2018, 8:02am UTC](https://discuss.elastic.co/t/what-happened-to-filebeat/121179/1 "2018-02-23T08:02:22Z")

</div>

![filebeat](https://us1.discourse-cdn.com/elastic/original/3X/3/4/343a863fa04d18fd4493d0e2a8e9c39bc092e275.jpg)  
from 15th February, my filebeat output log only at 8:30 am and stopped after two or three hours.  
I can not find error in log.please help me

---

<div class="post-metadata">

**Author:** ![andrewkroh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/andrewkroh/32/3784_2.png) [@andrewkroh](https://discuss.elastic.co/u/andrewkroh)\
**Post date:** [February 23, 2018, 3:28pm UTC](https://discuss.elastic.co/t/what-happened-to-filebeat/121179/2 "2018-02-23T15:28:06Z")

</div>

You aren't giving us much information in order to be able to help you. For starters what is the graph showing? What's the configuration you are using? Where are you sending that data to? What Filebeat version? Can you share the log output from Filebeat?

Perhaps there is back pressure from the output.

---

<div class="post-metadata">

**Author:** ![Feng\_Mi](https://avatars.discourse-cdn.com/v4/letter/f/54ee81/32.png) [@Feng\_Mi](https://discuss.elastic.co/u/Feng_Mi)\
**Post date:** [February 24, 2018, 3:15am UTC](https://discuss.elastic.co/t/what-happened-to-filebeat/121179/3 "2018-02-24T03:15:08Z")

</div>

This is my config file

 ![filebeat4](https://us1.discourse-cdn.com/elastic/original/3X/a/7/a7083dc8bab8fd8a88c764922c80c188ce913093.jpg) ![filebeat3](https://us1.discourse-cdn.com/elastic/original/3X/8/a/8af8844f929a219277db7770b59e8a4f46ceb898.jpg)  
filebeat log, i can only find this error in filebeat log.  
 ![filebeat2](https://us1.discourse-cdn.com/elastic/original/3X/6/7/67a8d4a4eed748cd6df40be031aee19ca38284c5.jpg)

---

<div class="post-metadata">

**Author:** ![Feng\_Mi](https://avatars.discourse-cdn.com/v4/letter/f/54ee81/32.png) [@Feng\_Mi](https://discuss.elastic.co/u/Feng_Mi)\
**Post date:** [February 24, 2018, 3:25am UTC](https://discuss.elastic.co/t/what-happened-to-filebeat/121179/4 "2018-02-24T03:25:24Z")

</div>

I send the log to es everyday,but from 10 days ago, es only received logs about two hours one day.

 ![filebeat5](https://us1.discourse-cdn.com/elastic/original/3X/8/8/888db507a68c4fbad9f1391ecc41b41ae065d471.jpg)  
Today's line chart

---

<div class="post-metadata">

**Author:** ![Feng\_Mi](https://avatars.discourse-cdn.com/v4/letter/f/54ee81/32.png) [@Feng\_Mi](https://discuss.elastic.co/u/Feng_Mi)\
**Post date:** [February 24, 2018, 3:32am UTC](https://discuss.elastic.co/t/what-happened-to-filebeat/121179/5 "2018-02-24T03:32:24Z")

</div>

filebeat version 6.1.2  
elasticsearch version 6.1.3

---

<div class="post-metadata">

**Author:** ![Feng\_Mi](https://avatars.discourse-cdn.com/v4/letter/f/54ee81/32.png) [@Feng\_Mi](https://discuss.elastic.co/u/Feng_Mi)\
**Post date:** [February 26, 2018, 2:57am UTC](https://discuss.elastic.co/t/what-happened-to-filebeat/121179/6 "2018-02-26T02:57:50Z")

</div>

I fixed it by improving my es cloud server.  
how can I know details of es cloud server's cpu perform. I need figure out which index cost most of the cpu and memory.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 26, 2018, 2:57am UTC](https://discuss.elastic.co/t/what-happened-to-filebeat/121179/7 "2018-03-26T02:57:55Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
