# Will the total data gets shipped every time by filebeats?
**URL:** https://discuss.elastic.co/t/will-the-total-data-gets-shipped-every-time-by-filebeats/55479
**Category:** Beats
**Created:** [July 14, 2016, 7:02am UTC](https://discuss.elastic.co/t/will-the-total-data-gets-shipped-every-time-by-filebeats/55479 "2016-07-14T07:02:21Z")
**Posts on this page:** 4
**Page:** 1
### Author:  [@dubul](https://discuss.elastic.co/u/dubul)
#### Post date: [July 14, 2016, 7:02am UTC](https://discuss.elastic.co/t/will-the-total-data-gets-shipped-every-time-by-filebeats/55479/1 "2016-07-14T07:02:21Z")
I want to ship the logs from a server to elk. I would like to know whether all the logs gets shipped everytime or only newly generated logs?
for example logs at point are A+B, they get shipped to elastic search. after 1 hour the logs are A+B+c.
My question is does filebeat ship only new generated C logs?
---
### Author:  [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [July 14, 2016, 7:04am UTC](https://discuss.elastic.co/t/will-the-total-data-gets-shipped-every-time-by-filebeats/55479/2 "2016-07-14T07:04:28Z")
Filebeat keeps track of the files it has processed and only ships new lines.
---
### Author:  [@dubul](https://discuss.elastic.co/u/dubul)
#### Post date: [July 14, 2016, 11:49pm UTC](https://discuss.elastic.co/t/will-the-total-data-gets-shipped-every-time-by-filebeats/55479/3 "2016-07-14T23:49:22Z")
filebeat:
# List of prospectors to fetch data.
prospectors:
# Each - is a prospector. Below are the prospector specific configurations
-
paths:
#- /var/log/\*.log
- C:\filebeattesting\log\*.log
registry\_file: "C:/ProgramData/filebeat/registry"
output:
### Elasticsearch as output
#elasticsearch:
# Array of hosts to connect to.
# Scheme and port can be left out and will be set to the default (http and 9200)
# In case you specify and additional path, the scheme is required: [http://localhost:9200/path](http://localhost:9200/path)
# IPv6 addresses should always be defined as: https://[2001:db8::1]:9200
#hosts: ["10.40.104.27:9200"]
logstash:
# The Logstash hosts
hosts: ["10.40.40.128:5044"]
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [August 4, 2016, 7:02am UTC](https://discuss.elastic.co/t/will-the-total-data-gets-shipped-every-time-by-filebeats/55479/4 "2016-08-04T07:02:26Z")
This topic was automatically closed after 21 days. New replies are no longer allowed.