WARNING: Version 1.1 of Filebeat has passed its EOL date.

This documentation is no longer being maintained and may be removed. If you are running this version, we strongly advise you to upgrade. For the latest information, see the current release documentation.

« Why can’t I read log files from network volumes? Why is Filebeat using too much CPU? »
Elastic Docs ›Filebeat Reference [1.1] ›Troubleshooting ›Frequently Asked Questions

Why isn’t Filebeat collecting lines from my file?

edit
IMPORTANT: This documentation is no longer updated. Refer to Elastic's version policy and the latest documentation.

Why isn’t Filebeat collecting lines from my file?

edit

Filebeat might be incorrectly configured or unable to send events to the output. To resolve the issue:

  • Make sure the config file specifies the correct path to the file that you are collecting. See Step 2: Configuring Filebeat for more information.
  • Verify that the file is not older than the value specified by ignore_older. By default, Filebeat stops reading files that are older than 24 hours. You can change this behavior by specifying a different value for ignore_older.

  • Make sure that Filebeat is able to send events to the configured output. Run Filebeat in debug mode to determine whether it’s publishing events successfully:

    ./filebeat -c config.yml -e -d "*"
« Why can’t I read log files from network volumes? Why is Filebeat using too much CPU? »