{"action":"created","issue":{"url":"https://api.github.com/repos/elastic/logstash-forwarder/issues/484","labels_url":"https://api.github.com/repos/elastic/logstash-forwarder/issues/484/labels{/name}","comments_url":"https://api.github.com/repos/elastic/logstash-forwarder/issues/484/comments","events_url":"https://api.github.com/repos/elastic/logstash-forwarder/issues/484/events","html_url":"https://github.com/elastic/logstash-forwarder/issues/484","id":93894851,"number":484,"title":"file offset tracking is broken in windows","user":{"login":"drocsid","id":5471197,"avatar_url":"https://avatars.githubusercontent.com/u/5471197?v=3","gravatar_id":"","url":"https://api.github.com/users/drocsid","html_url":"https://github.com/drocsid","followers_url":"https://api.github.com/users/drocsid/followers","following_url":"https://api.github.com/users/drocsid/following{/other_user}","gists_url":"https://api.github.com/users/drocsid/gists{/gist_id}","starred_url":"https://api.github.com/users/drocsid/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/drocsid/subscriptions","organizations_url":"https://api.github.com/users/drocsid/orgs","repos_url":"https://api.github.com/users/drocsid/repos","events_url":"https://api.github.com/users/drocsid/events{/privacy}","received_events_url":"https://api.github.com/users/drocsid/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/elastic/logstash-forwarder/labels/bug","name":"bug","color":"fc2929"},{"url":"https://api.github.com/repos/elastic/logstash-forwarder/labels/filebeat","name":"filebeat","color":"006b75"},{"url":"https://api.github.com/repos/elastic/logstash-forwarder/labels/windows","name":"windows","color":"c7def8"}],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2015-07-08T21:31:34Z","updated_at":"2015-10-07T12:03:48Z","closed_at":"2015-10-07T12:03:48Z","body":"I installed and ran the logstash .40 Windows binary provided by https://www.elastic.co/downloads/logstash . It created a file .logstash-forwarder.new. Then in standard out, I read:\r\n\r\n2015/07/08 15:17:04.014059 registry rotate: rename of .logstash-forwarder to .logstash-forwarder.old - rename .logstash-forwarder .logstash-forwarder.old: The system cannot find the file specified.\r\n\r\nAfter restarting the binary again, I saw the same message.\r\n\r\nFinally I renamed the file to .logstash-forwarder, and the standard out displayed:\r\n\r\n2015/07/08 17:08:26.117925 registry rotate: rename of .logstash-forwarder to .logstash-forwarder.old - rename .logstash-forwarder .logstash-forwarder.old: The process cannot access the file because it is being used by another process.\r\n\r\nHowever I believe the only process that should have the file open is lsf. Then there is another issue with the process handling the file.\r\n\r\nIt appears there is an issue with offset tracking in logstash-forwarder for Windows. This should be a relatively simple fix, for whoever is responsible for the Windows build."},"comment":{"url":"https://api.github.com/repos/elastic/logstash-forwarder/issues/comments/146176058","html_url":"https://github.com/elastic/logstash-forwarder/issues/484#issuecomment-146176058","issue_url":"https://api.github.com/repos/elastic/logstash-forwarder/issues/484","id":146176058,"user":{"login":"ruflin","id":244900,"avatar_url":"https://avatars.githubusercontent.com/u/244900?v=3","gravatar_id":"","url":"https://api.github.com/users/ruflin","html_url":"https://github.com/ruflin","followers_url":"https://api.github.com/users/ruflin/followers","following_url":"https://api.github.com/users/ruflin/following{/other_user}","gists_url":"https://api.github.com/users/ruflin/gists{/gist_id}","starred_url":"https://api.github.com/users/ruflin/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ruflin/subscriptions","organizations_url":"https://api.github.com/users/ruflin/orgs","repos_url":"https://api.github.com/users/ruflin/repos","events_url":"https://api.github.com/users/ruflin/events{/privacy}","received_events_url":"https://api.github.com/users/ruflin/received_events","type":"User","site_admin":false},"created_at":"2015-10-07T12:03:48Z","updated_at":"2015-10-07T12:03:48Z","body":"As the next release of logstash-forwarder will be [filebeat](https://github.com/elastic/filebeat), I will close this issue based on the comment above. In case the issue still exists in filebeat, please reopen or open a new issue directly in the filebeat repo."}}