2021-11-22T09:00:02.140-1000	INFO	instance/beat.go:665	Home path: [C:\Program Files\Filebeat] Config path: [C:\Program Files\Filebeat] Data path: [C:\ProgramData\filebeat] Logs path: [C:\ProgramData\filebeat\logs]
2021-11-22T09:00:02.142-1000	DEBUG	[beat]	instance/beat.go:723	Beat metadata path: C:\ProgramData\filebeat\meta.json
2021-11-22T09:00:02.142-1000	INFO	instance/beat.go:673	Beat ID: 6cde9183-7280-47a0-8216-564015268e5a
2021-11-22T09:00:02.142-1000	DEBUG	[seccomp]	seccomp/seccomp.go:96	Syscall filtering is only supported on Linux
2021-11-22T09:00:02.148-1000	INFO	[beat]	instance/beat.go:1014	Beat info	{"system_info": {"beat": {"path": {"config": "C:\\Program Files\\Filebeat", "data": "C:\\ProgramData\\filebeat", "home": "C:\\Program Files\\Filebeat", "logs": "C:\\ProgramData\\filebeat\\logs"}, "type": "filebeat", "uuid": "6cde9183-7280-47a0-8216-564015268e5a"}}}
2021-11-22T09:00:02.149-1000	INFO	[beat]	instance/beat.go:1023	Build info	{"system_info": {"build": {"commit": "5ae799cb1c3c490c9a27b14cb463dc23696bc7d3", "libbeat": "7.15.1", "time": "2021-10-07T22:06:50.000Z", "version": "7.15.1"}}}
2021-11-22T09:00:02.149-1000	INFO	[beat]	instance/beat.go:1026	Go runtime info	{"system_info": {"go": {"os":"windows","arch":"amd64","max_procs":1,"version":"go1.16.6"}}}
2021-11-22T09:00:02.167-1000	INFO	[beat]	instance/beat.go:1030	Host info	{"system_info": {"host": {"architecture":"x86_64","boot_time":"2021-11-22T00:43:55.33-10:00","name":"DESKTOP-QKUKV5D","ip":["fe80::9429:568c:a220:d64a/64","172.16.240.128/24","fe80::a4cf:72d1:a371:cf60/64","169.254.207.96/16","::1/128","127.0.0.1/8"],"kernel_version":"10.0.19041.928 (WinBuild.160101.0800)","mac":["00:0c:29:8f:22:a7","38:f9:d3:d3:e0:ed"],"os":{"type":"windows","family":"windows","platform":"windows","name":"Windows 10 Home","version":"10.0","major":10,"minor":0,"patch":0,"build":"19043.928"},"timezone":"HST","timezone_offset_sec":-36000,"id":"b79bc509-70cb-4f0e-86bf-c362cc45fc41"}}}
2021-11-22T09:00:02.167-1000	INFO	[beat]	instance/beat.go:1059	Process info	{"system_info": {"process": {"cwd": "C:\\Windows\\system32", "exe": "C:\\Program Files\\Filebeat\\filebeat.exe", "name": "filebeat.exe", "pid": 7320, "ppid": 836, "start_time": "2021-11-22T09:00:01.865-1000"}}}
2021-11-22T09:00:02.167-1000	INFO	instance/beat.go:309	Setup Beat: filebeat; Version: 7.15.1
2021-11-22T09:00:02.167-1000	DEBUG	[beat]	instance/beat.go:335	Initializing output plugins
2021-11-22T09:00:02.167-1000	INFO	[index-management]	idxmgmt/std.go:184	Set output.elasticsearch.index to 'filebeat-7.15.1' as ILM is enabled.
2021-11-22T09:00:02.172-1000	INFO	[esclientleg]	eslegclient/connection.go:100	elasticsearch url: https://816875067a904f2e8fa560c08016b819.us-west1.gcp.cloud.es.io:443
2021-11-22T09:00:02.172-1000	DEBUG	[publisher]	pipeline/consumer.go:148	start pipeline event consumer
2021-11-22T09:00:02.173-1000	INFO	[publisher]	pipeline/module.go:113	Beat name: DESKTOP-QKUKV5D
2021-11-22T09:00:02.231-1000	INFO	instance/beat.go:473	filebeat start running.
2021-11-22T09:00:02.233-1000	INFO	[monitoring]	log/log.go:142	Starting metrics logging every 30s
2021-11-22T09:00:02.231-1000	DEBUG	[test]	registrar/migrate.go:304	isFile(C:\ProgramData\filebeat\registry) -> false
2021-11-22T09:00:02.233-1000	DEBUG	[test]	registrar/migrate.go:304	isFile() -> false
2021-11-22T09:00:02.233-1000	DEBUG	[test]	registrar/migrate.go:297	isDir(C:\ProgramData\filebeat\registry\filebeat) -> true
2021-11-22T09:00:02.233-1000	DEBUG	[test]	registrar/migrate.go:304	isFile(C:\ProgramData\filebeat\registry\filebeat\meta.json) -> true
2021-11-22T09:00:02.233-1000	DEBUG	[registrar]	registrar/migrate.go:84	Registry type '1' found
2021-11-22T09:00:02.232-1000	DEBUG	[service]	service/service_windows.go:97	Windows is interactive: false
2021-11-22T09:00:02.238-1000	INFO	memlog/store.go:119	Loading data file of 'C:\ProgramData\filebeat\registry\filebeat' succeeded. Active transaction id=0
2021-11-22T09:00:02.241-1000	INFO	memlog/store.go:124	Finished loading transaction log file for 'C:\ProgramData\filebeat\registry\filebeat'. Active transaction id=96
2021-11-22T09:00:02.241-1000	DEBUG	[httpjson.transforms]	v2/transform_registry.go:75	Register transform request:append
2021-11-22T09:00:02.243-1000	DEBUG	[httpjson.transforms]	v2/transform_registry.go:75	Register transform request:delete
2021-11-22T09:00:02.243-1000	DEBUG	[httpjson.transforms]	v2/transform_registry.go:75	Register transform request:set
2021-11-22T09:00:02.243-1000	DEBUG	[httpjson.transforms]	v2/transform_registry.go:75	Register transform response:append
2021-11-22T09:00:02.243-1000	DEBUG	[httpjson.transforms]	v2/transform_registry.go:75	Register transform response:delete
2021-11-22T09:00:02.243-1000	DEBUG	[httpjson.transforms]	v2/transform_registry.go:75	Register transform response:set
2021-11-22T09:00:02.243-1000	DEBUG	[httpjson.transforms]	v2/transform_registry.go:75	Register transform pagination:append
2021-11-22T09:00:02.243-1000	DEBUG	[httpjson.transforms]	v2/transform_registry.go:75	Register transform pagination:delete
2021-11-22T09:00:02.243-1000	DEBUG	[httpjson.transforms]	v2/transform_registry.go:75	Register transform pagination:set
2021-11-22T09:00:02.243-1000	DEBUG	[httpjson.transforms]	v2/encoding.go:80	<nil>
2021-11-22T09:00:02.245-1000	DEBUG	[httpjson.transforms]	v2/encoding.go:81	<nil>
2021-11-22T09:00:02.245-1000	DEBUG	[httpjson.transforms]	v2/encoding.go:86	<nil>
2021-11-22T09:00:02.245-1000	DEBUG	[httpjson.transforms]	v2/encoding.go:87	<nil>
2021-11-22T09:00:02.245-1000	INFO	[registrar]	registrar/registrar.go:109	States Loaded from registrar: 1
2021-11-22T09:00:02.245-1000	INFO	[crawler]	beater/crawler.go:71	Loading Inputs: 2
2021-11-22T09:00:02.246-1000	DEBUG	[input]	log/config.go:207	recursive glob enabled
2021-11-22T09:00:02.248-1000	DEBUG	[registrar]	registrar/registrar.go:140	Starting Registrar
2021-11-22T09:00:02.249-1000	DEBUG	[input]	log/input.go:178	exclude_files: []. Number of states: 1	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:00:02.249-1000	DEBUG	[input]	file/states.go:68	New state added for C:\logs\this_file_is_not_locked.log
2021-11-22T09:00:02.250-1000	DEBUG	[acker]	beater/acker.go:59	stateful ack	{"count": 1}
2021-11-22T09:00:02.251-1000	DEBUG	[publisher]	pipeline/client.go:231	Pipeline client receives callback 'onFilteredOut' for event: {Timestamp:0001-01-01 00:00:00 +0000 UTC Meta:null Fields:null Private:{Id:native::327680-101159-3459600828 PrevId: Finished:true Fileinfo:<nil> Source:C:\logs\this_file_is_not_locked.log Offset:1299057 Timestamp:2021-11-22 08:56:38.2418404 -1000 HST TTL:-1ns Type:log Meta:map[] FileStateOS:327680-101159-3459600828 IdentifierName:native} TimeSeries:false}
2021-11-22T09:00:02.251-1000	DEBUG	[input]	log/input.go:208	input with previous states loaded: 1	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:00:02.251-1000	INFO	[input]	log/input.go:164	Configured paths: [C:\logs\this_file_is_not_locked.log]	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:00:02.251-1000	INFO	[crawler]	beater/crawler.go:141	Starting input (ID: 8641568387620582453)
2021-11-22T09:00:02.252-1000	DEBUG	[scanner]	filestream/fswatch.go:277	recursive glob enabled
2021-11-22T09:00:02.253-1000	INFO	[crawler]	beater/crawler.go:141	Starting input (ID: 14945099210397628039)
2021-11-22T09:00:02.253-1000	INFO	[crawler]	beater/crawler.go:108	Loading and starting Inputs completed. Enabled inputs: 2
2021-11-22T09:00:02.253-1000	DEBUG	[registrar]	registrar/registrar.go:263	Processing 1 events
2021-11-22T09:00:02.253-1000	DEBUG	[registrar]	registrar/registrar.go:230	Registrar state updates processed. Count: 1
2021-11-22T09:00:02.253-1000	DEBUG	[registrar]	registrar/registrar.go:253	Registrar states cleaned up. Before: 1, After: 1, Pending: 0
2021-11-22T09:00:02.254-1000	DEBUG	[registrar]	registrar/registrar.go:205	Registry file updated. 1 active states.
2021-11-22T09:00:02.254-1000	DEBUG	[input]	log/input.go:215	Start next scan	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:00:02.255-1000	DEBUG	[input]	log/input.go:465	Check file for harvesting: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:00:02.255-1000	DEBUG	[input]	log/input.go:563	Update existing file for harvesting: C:\logs\this_file_is_not_locked.log, offset: 1299057	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:00:02.256-1000	DEBUG	[input]	log/input.go:618	File didn't change: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:00:02.256-1000	DEBUG	[input]	log/input.go:279	input states cleaned up. Before: 1, After: 1, Pending: 0	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:00:02.256-1000	INFO	[input.filestream]	compat/compat.go:111	Input filestream starting	{"id": "CF67A88CA0B8B687"}
2021-11-22T09:00:02.256-1000	DEBUG	[input.filestream]	filestream/prospector.go:109	Starting prospector	{"id": "CF67A88CA0B8B687", "prospector": "file_prospector"}
2021-11-22T09:00:02.258-1000	INFO	[file_watcher]	filestream/fswatch.go:137	Start next scan
2021-11-22T09:00:02.258-1000	DEBUG	[file_watcher]	filestream/fswatch.go:204	Found 1 paths
2021-11-22T09:00:02.258-1000	DEBUG	[input.filestream]	filestream/prospector.go:156	A new file C:\logs\this_file_is_locked.log has been found	{"id": "CF67A88CA0B8B687", "prospector": "file_prospector", "operation": "create", "source_name": "native::393216-107972-3459600828", "os_id": "393216-107972-3459600828", "new_path": "C:\\logs\\this_file_is_locked.log"}
2021-11-22T09:00:02.258-1000	DEBUG	[input.filestream]	input-logfile/harvester.go:145	Starting harvester for file	{"id": "CF67A88CA0B8B687", "source": "filestream::.global::native::393216-107972-3459600828"}
2021-11-22T09:00:02.261-1000	DEBUG	[input.filestream]	filestream/input.go:174	newLogFileReader with config.MaxBytes:10485760	{"id": "CF67A88CA0B8B687", "source": "filestream::.global::native::393216-107972-3459600828", "path": "C:\\logs\\this_file_is_locked.log", "state-id": "native::393216-107972-3459600828"}
2021-11-22T09:00:02.262-1000	DEBUG	[input.filestream]	filestream/filestream.go:131	End of file reached: C:\logs\this_file_is_locked.log; Backoff now.	{"id": "CF67A88CA0B8B687", "source": "filestream::.global::native::393216-107972-3459600828", "path": "C:\\logs\\this_file_is_locked.log", "state-id": "native::393216-107972-3459600828"}
2021-11-22T09:00:03.265-1000	DEBUG	[input.filestream]	filestream/filestream.go:131	End of file reached: C:\logs\this_file_is_locked.log; Backoff now.	{"id": "CF67A88CA0B8B687", "source": "filestream::.global::native::393216-107972-3459600828", "path": "C:\\logs\\this_file_is_locked.log", "state-id": "native::393216-107972-3459600828"}
2021-11-22T09:00:05.266-1000	DEBUG	[input.filestream]	filestream/filestream.go:131	End of file reached: C:\logs\this_file_is_locked.log; Backoff now.	{"id": "CF67A88CA0B8B687", "source": "filestream::.global::native::393216-107972-3459600828", "path": "C:\\logs\\this_file_is_locked.log", "state-id": "native::393216-107972-3459600828"}
2021-11-22T09:00:09.278-1000	DEBUG	[input.filestream]	filestream/filestream.go:131	End of file reached: C:\logs\this_file_is_locked.log; Backoff now.	{"id": "CF67A88CA0B8B687", "source": "filestream::.global::native::393216-107972-3459600828", "path": "C:\\logs\\this_file_is_locked.log", "state-id": "native::393216-107972-3459600828"}
2021-11-22T09:00:12.265-1000	DEBUG	[input]	input/input.go:139	Run input
2021-11-22T09:00:12.265-1000	DEBUG	[input]	log/input.go:215	Start next scan	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:00:12.266-1000	DEBUG	[input]	log/input.go:465	Check file for harvesting: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:00:12.266-1000	DEBUG	[input]	log/input.go:563	Update existing file for harvesting: C:\logs\this_file_is_not_locked.log, offset: 1299057	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:00:12.266-1000	DEBUG	[input]	log/input.go:618	File didn't change: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:00:12.266-1000	DEBUG	[input]	log/input.go:279	input states cleaned up. Before: 1, After: 1, Pending: 0	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:00:12.270-1000	INFO	[file_watcher]	filestream/fswatch.go:137	Start next scan
2021-11-22T09:00:12.271-1000	DEBUG	[file_watcher]	filestream/fswatch.go:204	Found 1 paths
2021-11-22T09:00:17.280-1000	DEBUG	[input.filestream]	filestream/filestream.go:131	End of file reached: C:\logs\this_file_is_locked.log; Backoff now.	{"id": "CF67A88CA0B8B687", "source": "filestream::.global::native::393216-107972-3459600828", "path": "C:\\logs\\this_file_is_locked.log", "state-id": "native::393216-107972-3459600828"}
2021-11-22T09:00:22.275-1000	DEBUG	[input]	input/input.go:139	Run input
2021-11-22T09:00:22.275-1000	DEBUG	[input]	log/input.go:215	Start next scan	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:00:22.275-1000	DEBUG	[input]	log/input.go:465	Check file for harvesting: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:00:22.275-1000	DEBUG	[input]	log/input.go:563	Update existing file for harvesting: C:\logs\this_file_is_not_locked.log, offset: 1299057	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:00:22.275-1000	DEBUG	[input]	log/input.go:618	File didn't change: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:00:22.275-1000	DEBUG	[input]	log/input.go:279	input states cleaned up. Before: 1, After: 1, Pending: 0	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:00:22.275-1000	INFO	[file_watcher]	filestream/fswatch.go:137	Start next scan
2021-11-22T09:00:22.275-1000	DEBUG	[file_watcher]	filestream/fswatch.go:204	Found 1 paths
2021-11-22T09:00:27.287-1000	DEBUG	[input.filestream]	filestream/filestream.go:131	End of file reached: C:\logs\this_file_is_locked.log; Backoff now.	{"id": "CF67A88CA0B8B687", "source": "filestream::.global::native::393216-107972-3459600828", "path": "C:\\logs\\this_file_is_locked.log", "state-id": "native::393216-107972-3459600828"}
2021-11-22T09:00:32.261-1000	INFO	[file_watcher]	filestream/fswatch.go:137	Start next scan
2021-11-22T09:00:32.261-1000	DEBUG	[file_watcher]	filestream/fswatch.go:204	Found 1 paths
2021-11-22T09:00:32.269-1000	INFO	[monitoring]	log/log.go:184	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":328,"time":{"ms":328}},"total":{"ticks":374,"time":{"ms":374},"value":0},"user":{"ticks":46,"time":{"ms":46}}},"handles":{"open":186},"info":{"ephemeral_id":"fd66f199-aedd-4d05-9e17-b47a64844c3d","uptime":{"ms":30223},"version":"7.15.1"},"memstats":{"gc_next":19670832,"memory_alloc":9935248,"memory_sys":31497432,"memory_total":55721872,"rss":17633280},"runtime":{"goroutines":34}},"filebeat":{"events":{"added":1,"done":1},"harvester":{"open_files":0,"running":0}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"active":0},"type":"elasticsearch"},"pipeline":{"clients":2,"events":{"active":0,"filtered":1,"total":1},"queue":{"max_events":4096}}},"registrar":{"states":{"current":1,"update":1},"writes":{"success":1,"total":1}},"system":{"cpu":{"cores":1}}}}}
2021-11-22T09:00:32.289-1000	DEBUG	[input]	input/input.go:139	Run input
2021-11-22T09:00:32.289-1000	DEBUG	[input]	log/input.go:215	Start next scan	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:00:32.289-1000	DEBUG	[input]	log/input.go:465	Check file for harvesting: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:00:32.289-1000	DEBUG	[input]	log/input.go:563	Update existing file for harvesting: C:\logs\this_file_is_not_locked.log, offset: 1299057	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:00:32.289-1000	DEBUG	[input]	log/input.go:618	File didn't change: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:00:32.289-1000	DEBUG	[input]	log/input.go:279	input states cleaned up. Before: 1, After: 1, Pending: 0	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:00:37.292-1000	DEBUG	[input.filestream]	filestream/filestream.go:131	End of file reached: C:\logs\this_file_is_locked.log; Backoff now.	{"id": "CF67A88CA0B8B687", "source": "filestream::.global::native::393216-107972-3459600828", "path": "C:\\logs\\this_file_is_locked.log", "state-id": "native::393216-107972-3459600828"}
2021-11-22T09:00:42.261-1000	INFO	[file_watcher]	filestream/fswatch.go:137	Start next scan
2021-11-22T09:00:42.261-1000	DEBUG	[file_watcher]	filestream/fswatch.go:204	Found 1 paths
2021-11-22T09:00:42.309-1000	DEBUG	[input]	input/input.go:139	Run input
2021-11-22T09:00:42.309-1000	DEBUG	[input]	log/input.go:215	Start next scan	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:00:42.309-1000	DEBUG	[input]	log/input.go:465	Check file for harvesting: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:00:42.309-1000	DEBUG	[input]	log/input.go:563	Update existing file for harvesting: C:\logs\this_file_is_not_locked.log, offset: 1299057	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:00:42.309-1000	DEBUG	[input]	log/input.go:618	File didn't change: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:00:42.309-1000	DEBUG	[input]	log/input.go:279	input states cleaned up. Before: 1, After: 1, Pending: 0	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:00:47.295-1000	DEBUG	[input.filestream]	filestream/filestream.go:131	End of file reached: C:\logs\this_file_is_locked.log; Backoff now.	{"id": "CF67A88CA0B8B687", "source": "filestream::.global::native::393216-107972-3459600828", "path": "C:\\logs\\this_file_is_locked.log", "state-id": "native::393216-107972-3459600828"}
2021-11-22T09:00:52.267-1000	INFO	[file_watcher]	filestream/fswatch.go:137	Start next scan
2021-11-22T09:00:52.268-1000	DEBUG	[file_watcher]	filestream/fswatch.go:204	Found 1 paths
2021-11-22T09:00:52.315-1000	DEBUG	[input]	input/input.go:139	Run input
2021-11-22T09:00:52.315-1000	DEBUG	[input]	log/input.go:215	Start next scan	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:00:52.315-1000	DEBUG	[input]	log/input.go:465	Check file for harvesting: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:00:52.315-1000	DEBUG	[input]	log/input.go:563	Update existing file for harvesting: C:\logs\this_file_is_not_locked.log, offset: 1299057	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:00:52.315-1000	DEBUG	[input]	log/input.go:618	File didn't change: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:00:52.315-1000	DEBUG	[input]	log/input.go:279	input states cleaned up. Before: 1, After: 1, Pending: 0	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:00:57.303-1000	DEBUG	[input.filestream]	filestream/filestream.go:131	End of file reached: C:\logs\this_file_is_locked.log; Backoff now.	{"id": "CF67A88CA0B8B687", "source": "filestream::.global::native::393216-107972-3459600828", "path": "C:\\logs\\this_file_is_locked.log", "state-id": "native::393216-107972-3459600828"}
2021-11-22T09:01:02.262-1000	INFO	[monitoring]	log/log.go:184	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":375,"time":{"ms":47}},"total":{"ticks":421,"time":{"ms":47},"value":421},"user":{"ticks":46}},"handles":{"open":189},"info":{"ephemeral_id":"fd66f199-aedd-4d05-9e17-b47a64844c3d","uptime":{"ms":60207},"version":"7.15.1"},"memstats":{"gc_next":19670832,"memory_alloc":10104088,"memory_total":55890712,"rss":7168000},"runtime":{"goroutines":34}},"filebeat":{"harvester":{"open_files":0,"running":0}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"active":0}},"pipeline":{"clients":2,"events":{"active":0}}},"registrar":{"states":{"current":1}}}}}
2021-11-22T09:01:02.262-1000	INFO	[file_watcher]	filestream/fswatch.go:137	Start next scan
2021-11-22T09:01:02.262-1000	DEBUG	[file_watcher]	filestream/fswatch.go:204	Found 1 paths
2021-11-22T09:01:02.342-1000	DEBUG	[input]	input/input.go:139	Run input
2021-11-22T09:01:02.342-1000	DEBUG	[input]	log/input.go:215	Start next scan	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:01:02.342-1000	DEBUG	[input]	log/input.go:465	Check file for harvesting: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:01:02.342-1000	DEBUG	[input]	log/input.go:563	Update existing file for harvesting: C:\logs\this_file_is_not_locked.log, offset: 1299057	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:01:02.342-1000	DEBUG	[input]	log/input.go:618	File didn't change: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:01:02.342-1000	DEBUG	[input]	log/input.go:279	input states cleaned up. Before: 1, After: 1, Pending: 0	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:01:07.316-1000	DEBUG	[input.filestream]	filestream/filestream.go:131	End of file reached: C:\logs\this_file_is_locked.log; Backoff now.	{"id": "CF67A88CA0B8B687", "source": "filestream::.global::native::393216-107972-3459600828", "path": "C:\\logs\\this_file_is_locked.log", "state-id": "native::393216-107972-3459600828"}
2021-11-22T09:01:12.273-1000	INFO	[file_watcher]	filestream/fswatch.go:137	Start next scan
2021-11-22T09:01:12.273-1000	DEBUG	[file_watcher]	filestream/fswatch.go:204	Found 1 paths
2021-11-22T09:01:12.353-1000	DEBUG	[input]	input/input.go:139	Run input
2021-11-22T09:01:12.353-1000	DEBUG	[input]	log/input.go:215	Start next scan	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:01:12.353-1000	DEBUG	[input]	log/input.go:465	Check file for harvesting: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:01:12.353-1000	DEBUG	[input]	log/input.go:563	Update existing file for harvesting: C:\logs\this_file_is_not_locked.log, offset: 1299057	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:01:12.353-1000	DEBUG	[input]	log/input.go:618	File didn't change: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:01:12.353-1000	DEBUG	[input]	log/input.go:279	input states cleaned up. Before: 1, After: 1, Pending: 0	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:01:17.325-1000	DEBUG	[input.filestream]	filestream/filestream.go:131	End of file reached: C:\logs\this_file_is_locked.log; Backoff now.	{"id": "CF67A88CA0B8B687", "source": "filestream::.global::native::393216-107972-3459600828", "path": "C:\\logs\\this_file_is_locked.log", "state-id": "native::393216-107972-3459600828"}
2021-11-22T09:01:22.264-1000	INFO	[file_watcher]	filestream/fswatch.go:137	Start next scan
2021-11-22T09:01:22.264-1000	DEBUG	[file_watcher]	filestream/fswatch.go:204	Found 1 paths
2021-11-22T09:01:22.376-1000	DEBUG	[input]	input/input.go:139	Run input
2021-11-22T09:01:22.376-1000	DEBUG	[input]	log/input.go:215	Start next scan	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:01:22.376-1000	DEBUG	[input]	log/input.go:465	Check file for harvesting: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:01:22.376-1000	DEBUG	[input]	log/input.go:563	Update existing file for harvesting: C:\logs\this_file_is_not_locked.log, offset: 1299057	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:01:22.376-1000	DEBUG	[input]	log/input.go:618	File didn't change: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:01:22.376-1000	DEBUG	[input]	log/input.go:279	input states cleaned up. Before: 1, After: 1, Pending: 0	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:01:27.345-1000	DEBUG	[input.filestream]	filestream/filestream.go:131	End of file reached: C:\logs\this_file_is_locked.log; Backoff now.	{"id": "CF67A88CA0B8B687", "source": "filestream::.global::native::393216-107972-3459600828", "path": "C:\\logs\\this_file_is_locked.log", "state-id": "native::393216-107972-3459600828"}
2021-11-22T09:01:32.262-1000	INFO	[monitoring]	log/log.go:184	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":406,"time":{"ms":31}},"total":{"ticks":452,"time":{"ms":31},"value":452},"user":{"ticks":46}},"handles":{"open":189},"info":{"ephemeral_id":"fd66f199-aedd-4d05-9e17-b47a64844c3d","uptime":{"ms":90202},"version":"7.15.1"},"memstats":{"gc_next":19670832,"memory_alloc":10345856,"memory_sys":262144,"memory_total":56132480,"rss":5906432},"runtime":{"goroutines":34}},"filebeat":{"harvester":{"open_files":0,"running":0}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"active":0}},"pipeline":{"clients":2,"events":{"active":0}}},"registrar":{"states":{"current":1}}}}}
2021-11-22T09:01:32.279-1000	INFO	[file_watcher]	filestream/fswatch.go:137	Start next scan
2021-11-22T09:01:32.280-1000	DEBUG	[file_watcher]	filestream/fswatch.go:204	Found 1 paths
2021-11-22T09:01:32.391-1000	DEBUG	[input]	input/input.go:139	Run input
2021-11-22T09:01:32.391-1000	DEBUG	[input]	log/input.go:215	Start next scan	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:01:32.391-1000	DEBUG	[input]	log/input.go:465	Check file for harvesting: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:01:32.392-1000	DEBUG	[input]	log/input.go:563	Update existing file for harvesting: C:\logs\this_file_is_not_locked.log, offset: 1299057	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:01:32.392-1000	DEBUG	[input]	log/input.go:618	File didn't change: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:01:32.392-1000	DEBUG	[input]	log/input.go:279	input states cleaned up. Before: 1, After: 1, Pending: 0	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:01:37.348-1000	DEBUG	[input.filestream]	filestream/filestream.go:131	End of file reached: C:\logs\this_file_is_locked.log; Backoff now.	{"id": "CF67A88CA0B8B687", "source": "filestream::.global::native::393216-107972-3459600828", "path": "C:\\logs\\this_file_is_locked.log", "state-id": "native::393216-107972-3459600828"}
2021-11-22T09:01:42.275-1000	INFO	[file_watcher]	filestream/fswatch.go:137	Start next scan
2021-11-22T09:01:42.276-1000	DEBUG	[file_watcher]	filestream/fswatch.go:204	Found 1 paths
2021-11-22T09:01:42.401-1000	DEBUG	[input]	input/input.go:139	Run input
2021-11-22T09:01:42.401-1000	DEBUG	[input]	log/input.go:215	Start next scan	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:01:42.401-1000	DEBUG	[input]	log/input.go:465	Check file for harvesting: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:01:42.401-1000	DEBUG	[input]	log/input.go:563	Update existing file for harvesting: C:\logs\this_file_is_not_locked.log, offset: 1299057	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:01:42.401-1000	DEBUG	[input]	log/input.go:618	File didn't change: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:01:42.401-1000	DEBUG	[input]	log/input.go:279	input states cleaned up. Before: 1, After: 1, Pending: 0	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:01:47.358-1000	DEBUG	[input.filestream]	filestream/filestream.go:131	End of file reached: C:\logs\this_file_is_locked.log; Backoff now.	{"id": "CF67A88CA0B8B687", "source": "filestream::.global::native::393216-107972-3459600828", "path": "C:\\logs\\this_file_is_locked.log", "state-id": "native::393216-107972-3459600828"}
2021-11-22T09:01:52.269-1000	INFO	[file_watcher]	filestream/fswatch.go:137	Start next scan
2021-11-22T09:01:52.269-1000	DEBUG	[file_watcher]	filestream/fswatch.go:204	Found 1 paths
2021-11-22T09:01:52.411-1000	DEBUG	[input]	input/input.go:139	Run input
2021-11-22T09:01:52.411-1000	DEBUG	[input]	log/input.go:215	Start next scan	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:01:52.411-1000	DEBUG	[input]	log/input.go:465	Check file for harvesting: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:01:52.411-1000	DEBUG	[input]	log/input.go:563	Update existing file for harvesting: C:\logs\this_file_is_not_locked.log, offset: 1299057	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:01:52.411-1000	DEBUG	[input]	log/input.go:618	File didn't change: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:01:52.411-1000	DEBUG	[input]	log/input.go:279	input states cleaned up. Before: 1, After: 1, Pending: 0	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:01:57.367-1000	DEBUG	[input.filestream]	filestream/filestream.go:131	End of file reached: C:\logs\this_file_is_locked.log; Backoff now.	{"id": "CF67A88CA0B8B687", "source": "filestream::.global::native::393216-107972-3459600828", "path": "C:\\logs\\this_file_is_locked.log", "state-id": "native::393216-107972-3459600828"}
2021-11-22T09:02:02.259-1000	INFO	[monitoring]	log/log.go:184	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":406},"total":{"ticks":452,"value":452},"user":{"ticks":46}},"handles":{"open":189},"info":{"ephemeral_id":"fd66f199-aedd-4d05-9e17-b47a64844c3d","uptime":{"ms":120204},"version":"7.15.1"},"memstats":{"gc_next":19670832,"memory_alloc":10588168,"memory_total":56374792,"rss":5222400},"runtime":{"goroutines":34}},"filebeat":{"harvester":{"open_files":0,"running":0}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"active":0}},"pipeline":{"clients":2,"events":{"active":0}}},"registrar":{"states":{"current":1}}}}}
2021-11-22T09:02:02.276-1000	INFO	[file_watcher]	filestream/fswatch.go:137	Start next scan
2021-11-22T09:02:02.276-1000	DEBUG	[file_watcher]	filestream/fswatch.go:204	Found 1 paths
2021-11-22T09:02:02.416-1000	DEBUG	[input]	input/input.go:139	Run input
2021-11-22T09:02:02.416-1000	DEBUG	[input]	log/input.go:215	Start next scan	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:02:02.416-1000	DEBUG	[input]	log/input.go:465	Check file for harvesting: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:02:02.416-1000	DEBUG	[input]	log/input.go:563	Update existing file for harvesting: C:\logs\this_file_is_not_locked.log, offset: 1299057	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:02:02.416-1000	DEBUG	[input]	log/input.go:618	File didn't change: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:02:02.416-1000	DEBUG	[input]	log/input.go:279	input states cleaned up. Before: 1, After: 1, Pending: 0	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:02:07.370-1000	DEBUG	[input.filestream]	filestream/filestream.go:131	End of file reached: C:\logs\this_file_is_locked.log; Backoff now.	{"id": "CF67A88CA0B8B687", "source": "filestream::.global::native::393216-107972-3459600828", "path": "C:\\logs\\this_file_is_locked.log", "state-id": "native::393216-107972-3459600828"}
2021-11-22T09:02:12.279-1000	INFO	[file_watcher]	filestream/fswatch.go:137	Start next scan
2021-11-22T09:02:12.279-1000	DEBUG	[file_watcher]	filestream/fswatch.go:204	Found 1 paths
2021-11-22T09:02:12.420-1000	DEBUG	[input]	input/input.go:139	Run input
2021-11-22T09:02:12.420-1000	DEBUG	[input]	log/input.go:215	Start next scan	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:02:12.420-1000	DEBUG	[input]	log/input.go:465	Check file for harvesting: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:02:12.420-1000	DEBUG	[input]	log/input.go:563	Update existing file for harvesting: C:\logs\this_file_is_not_locked.log, offset: 1299057	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:02:12.420-1000	DEBUG	[input]	log/input.go:618	File didn't change: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:02:12.420-1000	DEBUG	[input]	log/input.go:279	input states cleaned up. Before: 1, After: 1, Pending: 0	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:02:17.413-1000	DEBUG	[input.filestream]	filestream/filestream.go:131	End of file reached: C:\logs\this_file_is_locked.log; Backoff now.	{"id": "CF67A88CA0B8B687", "source": "filestream::.global::native::393216-107972-3459600828", "path": "C:\\logs\\this_file_is_locked.log", "state-id": "native::393216-107972-3459600828"}
2021-11-22T09:02:22.266-1000	INFO	[file_watcher]	filestream/fswatch.go:137	Start next scan
2021-11-22T09:02:22.266-1000	DEBUG	[file_watcher]	filestream/fswatch.go:204	Found 1 paths
2021-11-22T09:02:22.421-1000	DEBUG	[input]	input/input.go:139	Run input
2021-11-22T09:02:22.421-1000	DEBUG	[input]	log/input.go:215	Start next scan	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:02:22.421-1000	DEBUG	[input]	log/input.go:465	Check file for harvesting: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:02:22.421-1000	DEBUG	[input]	log/input.go:563	Update existing file for harvesting: C:\logs\this_file_is_not_locked.log, offset: 1299057	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:02:22.421-1000	DEBUG	[input]	log/input.go:618	File didn't change: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:02:22.421-1000	DEBUG	[input]	log/input.go:279	input states cleaned up. Before: 1, After: 1, Pending: 0	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:02:27.430-1000	DEBUG	[input.filestream]	filestream/filestream.go:131	End of file reached: C:\logs\this_file_is_locked.log; Backoff now.	{"id": "CF67A88CA0B8B687", "source": "filestream::.global::native::393216-107972-3459600828", "path": "C:\\logs\\this_file_is_locked.log", "state-id": "native::393216-107972-3459600828"}
2021-11-22T09:02:32.265-1000	INFO	[file_watcher]	filestream/fswatch.go:137	Start next scan
2021-11-22T09:02:32.265-1000	DEBUG	[file_watcher]	filestream/fswatch.go:204	Found 1 paths
2021-11-22T09:02:32.282-1000	INFO	[monitoring]	log/log.go:184	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":578,"time":{"ms":172}},"total":{"ticks":640,"time":{"ms":188},"value":640},"user":{"ticks":62,"time":{"ms":16}}},"handles":{"open":187},"info":{"ephemeral_id":"fd66f199-aedd-4d05-9e17-b47a64844c3d","uptime":{"ms":150209},"version":"7.15.1"},"memstats":{"gc_next":19569872,"memory_alloc":9805392,"memory_total":56615520,"rss":5566464},"runtime":{"goroutines":34}},"filebeat":{"harvester":{"open_files":0,"running":0}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"active":0}},"pipeline":{"clients":2,"events":{"active":0}}},"registrar":{"states":{"current":1}}}}}
2021-11-22T09:02:32.423-1000	DEBUG	[input]	input/input.go:139	Run input
2021-11-22T09:02:32.423-1000	DEBUG	[input]	log/input.go:215	Start next scan	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:02:32.423-1000	DEBUG	[input]	log/input.go:465	Check file for harvesting: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:02:32.424-1000	DEBUG	[input]	log/input.go:563	Update existing file for harvesting: C:\logs\this_file_is_not_locked.log, offset: 1299057	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:02:32.424-1000	DEBUG	[input]	log/input.go:618	File didn't change: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:02:32.424-1000	DEBUG	[input]	log/input.go:279	input states cleaned up. Before: 1, After: 1, Pending: 0	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:02:37.443-1000	DEBUG	[input.filestream]	filestream/filestream.go:131	End of file reached: C:\logs\this_file_is_locked.log; Backoff now.	{"id": "CF67A88CA0B8B687", "source": "filestream::.global::native::393216-107972-3459600828", "path": "C:\\logs\\this_file_is_locked.log", "state-id": "native::393216-107972-3459600828"}
2021-11-22T09:02:42.276-1000	INFO	[file_watcher]	filestream/fswatch.go:137	Start next scan
2021-11-22T09:02:42.276-1000	DEBUG	[file_watcher]	filestream/fswatch.go:204	Found 1 paths
2021-11-22T09:02:42.434-1000	DEBUG	[input]	input/input.go:139	Run input
2021-11-22T09:02:42.434-1000	DEBUG	[input]	log/input.go:215	Start next scan	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:02:42.434-1000	DEBUG	[input]	log/input.go:465	Check file for harvesting: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:02:42.434-1000	DEBUG	[input]	log/input.go:563	Update existing file for harvesting: C:\logs\this_file_is_not_locked.log, offset: 1299057	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:02:42.434-1000	DEBUG	[input]	log/input.go:618	File didn't change: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:02:42.434-1000	DEBUG	[input]	log/input.go:279	input states cleaned up. Before: 1, After: 1, Pending: 0	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:02:47.453-1000	DEBUG	[input.filestream]	filestream/filestream.go:131	End of file reached: C:\logs\this_file_is_locked.log; Backoff now.	{"id": "CF67A88CA0B8B687", "source": "filestream::.global::native::393216-107972-3459600828", "path": "C:\\logs\\this_file_is_locked.log", "state-id": "native::393216-107972-3459600828"}
2021-11-22T09:02:52.268-1000	INFO	[file_watcher]	filestream/fswatch.go:137	Start next scan
2021-11-22T09:02:52.269-1000	DEBUG	[file_watcher]	filestream/fswatch.go:204	Found 1 paths
2021-11-22T09:02:52.442-1000	DEBUG	[input]	input/input.go:139	Run input
2021-11-22T09:02:52.442-1000	DEBUG	[input]	log/input.go:215	Start next scan	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:02:52.442-1000	DEBUG	[input]	log/input.go:465	Check file for harvesting: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:02:52.442-1000	DEBUG	[input]	log/input.go:563	Update existing file for harvesting: C:\logs\this_file_is_not_locked.log, offset: 1299057	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:02:52.442-1000	DEBUG	[input]	log/input.go:618	File didn't change: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:02:52.442-1000	DEBUG	[input]	log/input.go:279	input states cleaned up. Before: 1, After: 1, Pending: 0	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:02:57.461-1000	DEBUG	[input.filestream]	filestream/filestream.go:131	End of file reached: C:\logs\this_file_is_locked.log; Backoff now.	{"id": "CF67A88CA0B8B687", "source": "filestream::.global::native::393216-107972-3459600828", "path": "C:\\logs\\this_file_is_locked.log", "state-id": "native::393216-107972-3459600828"}
2021-11-22T09:03:02.269-1000	INFO	[file_watcher]	filestream/fswatch.go:137	Start next scan
2021-11-22T09:03:02.269-1000	DEBUG	[file_watcher]	filestream/fswatch.go:204	Found 1 paths
2021-11-22T09:03:02.286-1000	INFO	[monitoring]	log/log.go:184	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":593,"time":{"ms":15}},"total":{"ticks":655,"time":{"ms":15},"value":655},"user":{"ticks":62}},"handles":{"open":189},"info":{"ephemeral_id":"fd66f199-aedd-4d05-9e17-b47a64844c3d","uptime":{"ms":180244},"version":"7.15.1"},"memstats":{"gc_next":19569872,"memory_alloc":10042600,"memory_total":56852728,"rss":5681152},"runtime":{"goroutines":34}},"filebeat":{"harvester":{"open_files":0,"running":0}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"active":0}},"pipeline":{"clients":2,"events":{"active":0}}},"registrar":{"states":{"current":1}}}}}
2021-11-22T09:03:02.459-1000	DEBUG	[input]	input/input.go:139	Run input
2021-11-22T09:03:02.459-1000	DEBUG	[input]	log/input.go:215	Start next scan	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:03:02.459-1000	DEBUG	[input]	log/input.go:465	Check file for harvesting: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:03:02.459-1000	DEBUG	[input]	log/input.go:563	Update existing file for harvesting: C:\logs\this_file_is_not_locked.log, offset: 1299057	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:03:02.459-1000	DEBUG	[input]	log/input.go:618	File didn't change: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:03:02.459-1000	DEBUG	[input]	log/input.go:279	input states cleaned up. Before: 1, After: 1, Pending: 0	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:03:07.474-1000	DEBUG	[input.filestream]	filestream/filestream.go:131	End of file reached: C:\logs\this_file_is_locked.log; Backoff now.	{"id": "CF67A88CA0B8B687", "source": "filestream::.global::native::393216-107972-3459600828", "path": "C:\\logs\\this_file_is_locked.log", "state-id": "native::393216-107972-3459600828"}
2021-11-22T09:03:12.288-1000	INFO	[file_watcher]	filestream/fswatch.go:137	Start next scan
2021-11-22T09:03:12.288-1000	DEBUG	[file_watcher]	filestream/fswatch.go:204	Found 1 paths
2021-11-22T09:03:12.475-1000	DEBUG	[input]	input/input.go:139	Run input
2021-11-22T09:03:12.475-1000	DEBUG	[input]	log/input.go:215	Start next scan	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:03:12.475-1000	DEBUG	[input]	log/input.go:465	Check file for harvesting: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:03:12.475-1000	DEBUG	[input]	log/input.go:563	Update existing file for harvesting: C:\logs\this_file_is_not_locked.log, offset: 1299057	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:03:12.475-1000	DEBUG	[input]	log/input.go:618	File didn't change: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:03:12.475-1000	DEBUG	[input]	log/input.go:279	input states cleaned up. Before: 1, After: 1, Pending: 0	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:03:17.481-1000	DEBUG	[input.filestream]	filestream/filestream.go:131	End of file reached: C:\logs\this_file_is_locked.log; Backoff now.	{"id": "CF67A88CA0B8B687", "source": "filestream::.global::native::393216-107972-3459600828", "path": "C:\\logs\\this_file_is_locked.log", "state-id": "native::393216-107972-3459600828"}
2021-11-22T09:03:22.282-1000	INFO	[file_watcher]	filestream/fswatch.go:137	Start next scan
2021-11-22T09:03:22.282-1000	DEBUG	[file_watcher]	filestream/fswatch.go:204	Found 1 paths
2021-11-22T09:03:22.487-1000	DEBUG	[input]	input/input.go:139	Run input
2021-11-22T09:03:22.487-1000	DEBUG	[input]	log/input.go:215	Start next scan	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:03:22.487-1000	DEBUG	[input]	log/input.go:465	Check file for harvesting: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:03:22.487-1000	DEBUG	[input]	log/input.go:563	Update existing file for harvesting: C:\logs\this_file_is_not_locked.log, offset: 1299057	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:03:22.487-1000	DEBUG	[input]	log/input.go:618	File didn't change: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:03:22.487-1000	DEBUG	[input]	log/input.go:279	input states cleaned up. Before: 1, After: 1, Pending: 0	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:03:27.489-1000	DEBUG	[input.filestream]	filestream/filestream.go:131	End of file reached: C:\logs\this_file_is_locked.log; Backoff now.	{"id": "CF67A88CA0B8B687", "source": "filestream::.global::native::393216-107972-3459600828", "path": "C:\\logs\\this_file_is_locked.log", "state-id": "native::393216-107972-3459600828"}
2021-11-22T09:03:32.267-1000	INFO	[file_watcher]	filestream/fswatch.go:137	Start next scan
2021-11-22T09:03:32.268-1000	DEBUG	[file_watcher]	filestream/fswatch.go:204	Found 1 paths
2021-11-22T09:03:32.286-1000	INFO	[monitoring]	log/log.go:184	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":671,"time":{"ms":78}},"total":{"ticks":733,"time":{"ms":78},"value":733},"user":{"ticks":62}},"handles":{"open":189},"info":{"ephemeral_id":"fd66f199-aedd-4d05-9e17-b47a64844c3d","uptime":{"ms":210217},"version":"7.15.1"},"memstats":{"gc_next":19569872,"memory_alloc":10290064,"memory_total":57100192,"rss":5218304},"runtime":{"goroutines":34}},"filebeat":{"harvester":{"open_files":0,"running":0}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"active":0}},"pipeline":{"clients":2,"events":{"active":0}}},"registrar":{"states":{"current":1}}}}}
2021-11-22T09:03:32.490-1000	DEBUG	[input]	input/input.go:139	Run input
2021-11-22T09:03:32.490-1000	DEBUG	[input]	log/input.go:215	Start next scan	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:03:32.490-1000	DEBUG	[input]	log/input.go:465	Check file for harvesting: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:03:32.490-1000	DEBUG	[input]	log/input.go:563	Update existing file for harvesting: C:\logs\this_file_is_not_locked.log, offset: 1299057	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:03:32.490-1000	DEBUG	[input]	log/input.go:618	File didn't change: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:03:32.490-1000	DEBUG	[input]	log/input.go:279	input states cleaned up. Before: 1, After: 1, Pending: 0	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:03:37.492-1000	DEBUG	[input.filestream]	filestream/filestream.go:131	End of file reached: C:\logs\this_file_is_locked.log; Backoff now.	{"id": "CF67A88CA0B8B687", "source": "filestream::.global::native::393216-107972-3459600828", "path": "C:\\logs\\this_file_is_locked.log", "state-id": "native::393216-107972-3459600828"}
2021-11-22T09:03:42.276-1000	INFO	[file_watcher]	filestream/fswatch.go:137	Start next scan
2021-11-22T09:03:42.276-1000	DEBUG	[file_watcher]	filestream/fswatch.go:204	Found 1 paths
2021-11-22T09:03:42.512-1000	DEBUG	[input]	input/input.go:139	Run input
2021-11-22T09:03:42.512-1000	DEBUG	[input]	log/input.go:215	Start next scan	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:03:42.512-1000	DEBUG	[input]	log/input.go:465	Check file for harvesting: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:03:42.512-1000	DEBUG	[input]	log/input.go:563	Update existing file for harvesting: C:\logs\this_file_is_not_locked.log, offset: 1299057	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:03:42.512-1000	DEBUG	[input]	log/input.go:618	File didn't change: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:03:42.512-1000	DEBUG	[input]	log/input.go:279	input states cleaned up. Before: 1, After: 1, Pending: 0	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:03:47.497-1000	DEBUG	[input.filestream]	filestream/filestream.go:131	End of file reached: C:\logs\this_file_is_locked.log; Backoff now.	{"id": "CF67A88CA0B8B687", "source": "filestream::.global::native::393216-107972-3459600828", "path": "C:\\logs\\this_file_is_locked.log", "state-id": "native::393216-107972-3459600828"}
2021-11-22T09:03:52.280-1000	INFO	[file_watcher]	filestream/fswatch.go:137	Start next scan
2021-11-22T09:03:52.281-1000	DEBUG	[file_watcher]	filestream/fswatch.go:204	Found 1 paths
2021-11-22T09:03:52.516-1000	DEBUG	[input]	input/input.go:139	Run input
2021-11-22T09:03:52.516-1000	DEBUG	[input]	log/input.go:215	Start next scan	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:03:52.516-1000	DEBUG	[input]	log/input.go:465	Check file for harvesting: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:03:52.516-1000	DEBUG	[input]	log/input.go:563	Update existing file for harvesting: C:\logs\this_file_is_not_locked.log, offset: 1299057	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:03:52.516-1000	DEBUG	[input]	log/input.go:618	File didn't change: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:03:52.516-1000	DEBUG	[input]	log/input.go:279	input states cleaned up. Before: 1, After: 1, Pending: 0	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:03:57.503-1000	DEBUG	[input.filestream]	filestream/filestream.go:131	End of file reached: C:\logs\this_file_is_locked.log; Backoff now.	{"id": "CF67A88CA0B8B687", "source": "filestream::.global::native::393216-107972-3459600828", "path": "C:\\logs\\this_file_is_locked.log", "state-id": "native::393216-107972-3459600828"}
2021-11-22T09:04:02.269-1000	INFO	[file_watcher]	filestream/fswatch.go:137	Start next scan
2021-11-22T09:04:02.269-1000	DEBUG	[file_watcher]	filestream/fswatch.go:204	Found 1 paths
2021-11-22T09:04:02.276-1000	INFO	[monitoring]	log/log.go:184	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":703,"time":{"ms":47}},"total":{"ticks":765,"time":{"ms":47},"value":765},"user":{"ticks":62}},"handles":{"open":189},"info":{"ephemeral_id":"fd66f199-aedd-4d05-9e17-b47a64844c3d","uptime":{"ms":240212},"version":"7.15.1"},"memstats":{"gc_next":19569872,"memory_alloc":10531256,"memory_total":57341384,"rss":5169152},"runtime":{"goroutines":34}},"filebeat":{"harvester":{"open_files":0,"running":0}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"active":0}},"pipeline":{"clients":2,"events":{"active":0}}},"registrar":{"states":{"current":1}}}}}
2021-11-22T09:04:02.527-1000	DEBUG	[input]	input/input.go:139	Run input
2021-11-22T09:04:02.527-1000	DEBUG	[input]	log/input.go:215	Start next scan	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:04:02.527-1000	DEBUG	[input]	log/input.go:465	Check file for harvesting: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:04:02.527-1000	DEBUG	[input]	log/input.go:563	Update existing file for harvesting: C:\logs\this_file_is_not_locked.log, offset: 1299057	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:04:02.527-1000	DEBUG	[input]	log/input.go:618	File didn't change: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:04:02.527-1000	DEBUG	[input]	log/input.go:279	input states cleaned up. Before: 1, After: 1, Pending: 0	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:04:07.515-1000	DEBUG	[input.filestream]	filestream/filestream.go:131	End of file reached: C:\logs\this_file_is_locked.log; Backoff now.	{"id": "CF67A88CA0B8B687", "source": "filestream::.global::native::393216-107972-3459600828", "path": "C:\\logs\\this_file_is_locked.log", "state-id": "native::393216-107972-3459600828"}
2021-11-22T09:04:12.269-1000	INFO	[file_watcher]	filestream/fswatch.go:137	Start next scan
2021-11-22T09:04:12.269-1000	DEBUG	[file_watcher]	filestream/fswatch.go:204	Found 1 paths
2021-11-22T09:04:12.535-1000	DEBUG	[input]	input/input.go:139	Run input
2021-11-22T09:04:12.536-1000	DEBUG	[input]	log/input.go:215	Start next scan	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:04:12.536-1000	DEBUG	[input]	log/input.go:465	Check file for harvesting: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:04:12.536-1000	DEBUG	[input]	log/input.go:563	Update existing file for harvesting: C:\logs\this_file_is_not_locked.log, offset: 1299057	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:04:12.536-1000	DEBUG	[input]	log/input.go:618	File didn't change: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:04:12.536-1000	DEBUG	[input]	log/input.go:279	input states cleaned up. Before: 1, After: 1, Pending: 0	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:04:17.526-1000	DEBUG	[input.filestream]	filestream/filestream.go:131	End of file reached: C:\logs\this_file_is_locked.log; Backoff now.	{"id": "CF67A88CA0B8B687", "source": "filestream::.global::native::393216-107972-3459600828", "path": "C:\\logs\\this_file_is_locked.log", "state-id": "native::393216-107972-3459600828"}
2021-11-22T09:04:22.277-1000	INFO	[file_watcher]	filestream/fswatch.go:137	Start next scan
2021-11-22T09:04:22.277-1000	DEBUG	[file_watcher]	filestream/fswatch.go:204	Found 1 paths
2021-11-22T09:04:22.542-1000	DEBUG	[input]	input/input.go:139	Run input
2021-11-22T09:04:22.542-1000	DEBUG	[input]	log/input.go:215	Start next scan	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:04:22.543-1000	DEBUG	[input]	log/input.go:465	Check file for harvesting: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:04:22.543-1000	DEBUG	[input]	log/input.go:563	Update existing file for harvesting: C:\logs\this_file_is_not_locked.log, offset: 1299057	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:04:22.543-1000	DEBUG	[input]	log/input.go:618	File didn't change: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:04:22.543-1000	DEBUG	[input]	log/input.go:279	input states cleaned up. Before: 1, After: 1, Pending: 0	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:04:27.537-1000	DEBUG	[input.filestream]	filestream/filestream.go:131	End of file reached: C:\logs\this_file_is_locked.log; Backoff now.	{"id": "CF67A88CA0B8B687", "source": "filestream::.global::native::393216-107972-3459600828", "path": "C:\\logs\\this_file_is_locked.log", "state-id": "native::393216-107972-3459600828"}
2021-11-22T09:04:32.273-1000	INFO	[file_watcher]	filestream/fswatch.go:137	Start next scan
2021-11-22T09:04:32.274-1000	DEBUG	[file_watcher]	filestream/fswatch.go:204	Found 1 paths
2021-11-22T09:04:32.288-1000	INFO	[monitoring]	log/log.go:184	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":750,"time":{"ms":32}},"total":{"ticks":828,"time":{"ms":48},"value":828},"user":{"ticks":78,"time":{"ms":16}}},"handles":{"open":187},"info":{"ephemeral_id":"fd66f199-aedd-4d05-9e17-b47a64844c3d","uptime":{"ms":270214},"version":"7.15.1"},"memstats":{"gc_next":19569872,"memory_alloc":9805416,"memory_total":57583032,"rss":4743168},"runtime":{"goroutines":34}},"filebeat":{"harvester":{"open_files":0,"running":0}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"active":0}},"pipeline":{"clients":2,"events":{"active":0}}},"registrar":{"states":{"current":1}}}}}
2021-11-22T09:04:32.556-1000	DEBUG	[input]	input/input.go:139	Run input
2021-11-22T09:04:32.556-1000	DEBUG	[input]	log/input.go:215	Start next scan	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:04:32.557-1000	DEBUG	[input]	log/input.go:465	Check file for harvesting: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:04:32.557-1000	DEBUG	[input]	log/input.go:563	Update existing file for harvesting: C:\logs\this_file_is_not_locked.log, offset: 1299057	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:04:32.557-1000	DEBUG	[input]	log/input.go:618	File didn't change: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:04:32.557-1000	DEBUG	[input]	log/input.go:279	input states cleaned up. Before: 1, After: 1, Pending: 0	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:04:37.544-1000	DEBUG	[input.filestream]	filestream/filestream.go:131	End of file reached: C:\logs\this_file_is_locked.log; Backoff now.	{"id": "CF67A88CA0B8B687", "source": "filestream::.global::native::393216-107972-3459600828", "path": "C:\\logs\\this_file_is_locked.log", "state-id": "native::393216-107972-3459600828"}
2021-11-22T09:04:42.269-1000	INFO	[file_watcher]	filestream/fswatch.go:137	Start next scan
2021-11-22T09:04:42.269-1000	DEBUG	[file_watcher]	filestream/fswatch.go:204	Found 1 paths
2021-11-22T09:04:42.566-1000	DEBUG	[input]	input/input.go:139	Run input
2021-11-22T09:04:42.566-1000	DEBUG	[input]	log/input.go:215	Start next scan	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:04:42.567-1000	DEBUG	[input]	log/input.go:465	Check file for harvesting: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:04:42.567-1000	DEBUG	[input]	log/input.go:563	Update existing file for harvesting: C:\logs\this_file_is_not_locked.log, offset: 1299057	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:04:42.567-1000	DEBUG	[input]	log/input.go:618	File didn't change: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:04:42.567-1000	DEBUG	[input]	log/input.go:279	input states cleaned up. Before: 1, After: 1, Pending: 0	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:04:47.553-1000	DEBUG	[input.filestream]	filestream/filestream.go:131	End of file reached: C:\logs\this_file_is_locked.log; Backoff now.	{"id": "CF67A88CA0B8B687", "source": "filestream::.global::native::393216-107972-3459600828", "path": "C:\\logs\\this_file_is_locked.log", "state-id": "native::393216-107972-3459600828"}
2021-11-22T09:04:52.279-1000	INFO	[file_watcher]	filestream/fswatch.go:137	Start next scan
2021-11-22T09:04:52.279-1000	DEBUG	[file_watcher]	filestream/fswatch.go:204	Found 1 paths
2021-11-22T09:04:52.582-1000	DEBUG	[input]	input/input.go:139	Run input
2021-11-22T09:04:52.582-1000	DEBUG	[input]	log/input.go:215	Start next scan	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:04:52.582-1000	DEBUG	[input]	log/input.go:465	Check file for harvesting: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:04:52.582-1000	DEBUG	[input]	log/input.go:563	Update existing file for harvesting: C:\logs\this_file_is_not_locked.log, offset: 1299057	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:04:52.582-1000	DEBUG	[input]	log/input.go:618	File didn't change: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:04:52.582-1000	DEBUG	[input]	log/input.go:279	input states cleaned up. Before: 1, After: 1, Pending: 0	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:04:57.563-1000	DEBUG	[input.filestream]	filestream/filestream.go:131	End of file reached: C:\logs\this_file_is_locked.log; Backoff now.	{"id": "CF67A88CA0B8B687", "source": "filestream::.global::native::393216-107972-3459600828", "path": "C:\\logs\\this_file_is_locked.log", "state-id": "native::393216-107972-3459600828"}
2021-11-22T09:05:02.262-1000	DEBUG	[input]	input-logfile/clean.go:60	Start store cleanup	{"input_type": "filestream"}
2021-11-22T09:05:02.262-1000	DEBUG	[input]	input-logfile/clean.go:69	No entries to remove were found	{"input_type": "filestream"}
2021-11-22T09:05:02.262-1000	DEBUG	[input]	input-logfile/clean.go:70	Done store cleanup	{"input_type": "filestream"}
2021-11-22T09:05:02.262-1000	DEBUG	[input]	input-cursor/clean.go:60	Start store cleanup	{"input_type": "winlog"}
2021-11-22T09:05:02.264-1000	DEBUG	[input]	input-cursor/clean.go:69	No entries to remove were found	{"input_type": "winlog"}
2021-11-22T09:05:02.264-1000	DEBUG	[input]	input-cursor/clean.go:70	Done store cleanup	{"input_type": "winlog"}
2021-11-22T09:05:02.264-1000	DEBUG	[input]	input-cursor/clean.go:60	Start store cleanup	{"input_type": "httpjson"}
2021-11-22T09:05:02.264-1000	DEBUG	[input]	input-cursor/clean.go:69	No entries to remove were found	{"input_type": "httpjson"}
2021-11-22T09:05:02.264-1000	DEBUG	[input]	input-cursor/clean.go:70	Done store cleanup	{"input_type": "httpjson"}
2021-11-22T09:05:02.264-1000	DEBUG	[input]	input-cursor/clean.go:60	Start store cleanup	{"input_type": "httpjson"}
2021-11-22T09:05:02.264-1000	DEBUG	[input]	input-cursor/clean.go:69	No entries to remove were found	{"input_type": "httpjson"}
2021-11-22T09:05:02.264-1000	DEBUG	[input]	input-cursor/clean.go:70	Done store cleanup	{"input_type": "httpjson"}
2021-11-22T09:05:02.266-1000	DEBUG	[input]	input-cursor/clean.go:60	Start store cleanup	{"input_type": "o365audit"}
2021-11-22T09:05:02.266-1000	DEBUG	[input]	input-cursor/clean.go:69	No entries to remove were found	{"input_type": "o365audit"}
2021-11-22T09:05:02.266-1000	DEBUG	[input]	input-cursor/clean.go:70	Done store cleanup	{"input_type": "o365audit"}
2021-11-22T09:05:02.271-1000	INFO	[file_watcher]	filestream/fswatch.go:137	Start next scan
2021-11-22T09:05:02.271-1000	DEBUG	[file_watcher]	filestream/fswatch.go:204	Found 1 paths
2021-11-22T09:05:02.275-1000	INFO	[monitoring]	log/log.go:184	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":781,"time":{"ms":31}},"total":{"ticks":859,"time":{"ms":31},"value":859},"user":{"ticks":78}},"handles":{"open":189},"info":{"ephemeral_id":"fd66f199-aedd-4d05-9e17-b47a64844c3d","uptime":{"ms":300209},"version":"7.15.1"},"memstats":{"gc_next":19569872,"memory_alloc":10048512,"memory_total":57826128,"rss":5898240},"runtime":{"goroutines":34}},"filebeat":{"harvester":{"open_files":0,"running":0}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"active":0}},"pipeline":{"clients":2,"events":{"active":0}}},"registrar":{"states":{"current":1}}}}}
2021-11-22T09:05:02.604-1000	DEBUG	[input]	input/input.go:139	Run input
2021-11-22T09:05:02.604-1000	DEBUG	[input]	log/input.go:215	Start next scan	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:05:02.604-1000	DEBUG	[input]	log/input.go:465	Check file for harvesting: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:05:02.604-1000	DEBUG	[input]	log/input.go:563	Update existing file for harvesting: C:\logs\this_file_is_not_locked.log, offset: 1299057	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:05:02.604-1000	DEBUG	[input]	log/input.go:618	File didn't change: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:05:02.604-1000	DEBUG	[input]	log/input.go:279	input states cleaned up. Before: 1, After: 1, Pending: 0	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:05:07.575-1000	DEBUG	[input.filestream]	filestream/filestream.go:131	End of file reached: C:\logs\this_file_is_locked.log; Backoff now.	{"id": "CF67A88CA0B8B687", "source": "filestream::.global::native::393216-107972-3459600828", "path": "C:\\logs\\this_file_is_locked.log", "state-id": "native::393216-107972-3459600828"}
2021-11-22T09:05:12.285-1000	INFO	[file_watcher]	filestream/fswatch.go:137	Start next scan
2021-11-22T09:05:12.286-1000	DEBUG	[file_watcher]	filestream/fswatch.go:204	Found 1 paths
2021-11-22T09:05:12.615-1000	DEBUG	[input]	input/input.go:139	Run input
2021-11-22T09:05:12.615-1000	DEBUG	[input]	log/input.go:215	Start next scan	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:05:12.615-1000	DEBUG	[input]	log/input.go:465	Check file for harvesting: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:05:12.615-1000	DEBUG	[input]	log/input.go:563	Update existing file for harvesting: C:\logs\this_file_is_not_locked.log, offset: 1299057	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:05:12.615-1000	DEBUG	[input]	log/input.go:618	File didn't change: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:05:12.615-1000	DEBUG	[input]	log/input.go:279	input states cleaned up. Before: 1, After: 1, Pending: 0	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:05:17.590-1000	DEBUG	[input.filestream]	filestream/filestream.go:131	End of file reached: C:\logs\this_file_is_locked.log; Backoff now.	{"id": "CF67A88CA0B8B687", "source": "filestream::.global::native::393216-107972-3459600828", "path": "C:\\logs\\this_file_is_locked.log", "state-id": "native::393216-107972-3459600828"}
2021-11-22T09:05:22.283-1000	INFO	[file_watcher]	filestream/fswatch.go:137	Start next scan
2021-11-22T09:05:22.284-1000	DEBUG	[file_watcher]	filestream/fswatch.go:204	Found 1 paths
2021-11-22T09:05:22.643-1000	DEBUG	[input]	input/input.go:139	Run input
2021-11-22T09:05:22.643-1000	DEBUG	[input]	log/input.go:215	Start next scan	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:05:22.643-1000	DEBUG	[input]	log/input.go:465	Check file for harvesting: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:05:22.643-1000	DEBUG	[input]	log/input.go:563	Update existing file for harvesting: C:\logs\this_file_is_not_locked.log, offset: 1299057	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:05:22.643-1000	DEBUG	[input]	log/input.go:618	File didn't change: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:05:22.643-1000	DEBUG	[input]	log/input.go:279	input states cleaned up. Before: 1, After: 1, Pending: 0	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:05:27.646-1000	DEBUG	[input.filestream]	filestream/filestream.go:131	End of file reached: C:\logs\this_file_is_locked.log; Backoff now.	{"id": "CF67A88CA0B8B687", "source": "filestream::.global::native::393216-107972-3459600828", "path": "C:\\logs\\this_file_is_locked.log", "state-id": "native::393216-107972-3459600828"}
2021-11-22T09:05:32.274-1000	INFO	[file_watcher]	filestream/fswatch.go:137	Start next scan
2021-11-22T09:05:32.274-1000	DEBUG	[file_watcher]	filestream/fswatch.go:204	Found 1 paths
2021-11-22T09:05:32.295-1000	INFO	[monitoring]	log/log.go:184	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":828,"time":{"ms":62}},"total":{"ticks":906,"time":{"ms":62},"value":906},"user":{"ticks":78}},"handles":{"open":189},"info":{"ephemeral_id":"fd66f199-aedd-4d05-9e17-b47a64844c3d","uptime":{"ms":330239},"version":"7.15.1"},"memstats":{"gc_next":19569872,"memory_alloc":10379984,"memory_total":58157600,"rss":5308416},"runtime":{"goroutines":34}},"filebeat":{"harvester":{"open_files":0,"running":0}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"active":0}},"pipeline":{"clients":2,"events":{"active":0}}},"registrar":{"states":{"current":1}}}}}
2021-11-22T09:05:32.656-1000	DEBUG	[input]	input/input.go:139	Run input
2021-11-22T09:05:32.656-1000	DEBUG	[input]	log/input.go:215	Start next scan	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:05:32.657-1000	DEBUG	[input]	log/input.go:465	Check file for harvesting: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:05:32.657-1000	DEBUG	[input]	log/input.go:563	Update existing file for harvesting: C:\logs\this_file_is_not_locked.log, offset: 1299057	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:05:32.657-1000	DEBUG	[input]	log/input.go:618	File didn't change: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:05:32.657-1000	DEBUG	[input]	log/input.go:279	input states cleaned up. Before: 1, After: 1, Pending: 0	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:05:37.673-1000	DEBUG	[input.filestream]	filestream/filestream.go:131	End of file reached: C:\logs\this_file_is_locked.log; Backoff now.	{"id": "CF67A88CA0B8B687", "source": "filestream::.global::native::393216-107972-3459600828", "path": "C:\\logs\\this_file_is_locked.log", "state-id": "native::393216-107972-3459600828"}
2021-11-22T09:05:42.284-1000	INFO	[file_watcher]	filestream/fswatch.go:137	Start next scan
2021-11-22T09:05:42.285-1000	DEBUG	[file_watcher]	filestream/fswatch.go:204	Found 1 paths
2021-11-22T09:05:42.662-1000	DEBUG	[input]	input/input.go:139	Run input
2021-11-22T09:05:42.662-1000	DEBUG	[input]	log/input.go:215	Start next scan	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:05:42.662-1000	DEBUG	[input]	log/input.go:465	Check file for harvesting: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:05:42.662-1000	DEBUG	[input]	log/input.go:563	Update existing file for harvesting: C:\logs\this_file_is_not_locked.log, offset: 1299057	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:05:42.662-1000	DEBUG	[input]	log/input.go:618	File didn't change: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:05:42.662-1000	DEBUG	[input]	log/input.go:279	input states cleaned up. Before: 1, After: 1, Pending: 0	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:05:47.683-1000	DEBUG	[input.filestream]	filestream/filestream.go:131	End of file reached: C:\logs\this_file_is_locked.log; Backoff now.	{"id": "CF67A88CA0B8B687", "source": "filestream::.global::native::393216-107972-3459600828", "path": "C:\\logs\\this_file_is_locked.log", "state-id": "native::393216-107972-3459600828"}
2021-11-22T09:05:52.280-1000	INFO	[file_watcher]	filestream/fswatch.go:137	Start next scan
2021-11-22T09:05:52.280-1000	DEBUG	[file_watcher]	filestream/fswatch.go:204	Found 1 paths
2021-11-22T09:05:52.671-1000	DEBUG	[input]	input/input.go:139	Run input
2021-11-22T09:05:52.671-1000	DEBUG	[input]	log/input.go:215	Start next scan	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:05:52.671-1000	DEBUG	[input]	log/input.go:465	Check file for harvesting: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:05:52.671-1000	DEBUG	[input]	log/input.go:563	Update existing file for harvesting: C:\logs\this_file_is_not_locked.log, offset: 1299057	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:05:52.671-1000	DEBUG	[input]	log/input.go:618	File didn't change: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:05:52.671-1000	DEBUG	[input]	log/input.go:279	input states cleaned up. Before: 1, After: 1, Pending: 0	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:05:57.689-1000	DEBUG	[input.filestream]	filestream/filestream.go:131	End of file reached: C:\logs\this_file_is_locked.log; Backoff now.	{"id": "CF67A88CA0B8B687", "source": "filestream::.global::native::393216-107972-3459600828", "path": "C:\\logs\\this_file_is_locked.log", "state-id": "native::393216-107972-3459600828"}
2021-11-22T09:06:02.273-1000	INFO	[file_watcher]	filestream/fswatch.go:137	Start next scan
2021-11-22T09:06:02.274-1000	DEBUG	[file_watcher]	filestream/fswatch.go:204	Found 1 paths
2021-11-22T09:06:02.274-1000	INFO	[monitoring]	log/log.go:184	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":875,"time":{"ms":32}},"total":{"ticks":953,"time":{"ms":32},"value":953},"user":{"ticks":78}},"handles":{"open":189},"info":{"ephemeral_id":"fd66f199-aedd-4d05-9e17-b47a64844c3d","uptime":{"ms":360207},"version":"7.15.1"},"memstats":{"gc_next":19569872,"memory_alloc":10538032,"memory_total":58315648,"rss":5234688},"runtime":{"goroutines":34}},"filebeat":{"harvester":{"open_files":0,"running":0}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"active":0}},"pipeline":{"clients":2,"events":{"active":0}}},"registrar":{"states":{"current":1}}}}}
2021-11-22T09:06:02.680-1000	DEBUG	[input]	input/input.go:139	Run input
2021-11-22T09:06:02.680-1000	DEBUG	[input]	log/input.go:215	Start next scan	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:06:02.680-1000	DEBUG	[input]	log/input.go:465	Check file for harvesting: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:06:02.680-1000	DEBUG	[input]	log/input.go:563	Update existing file for harvesting: C:\logs\this_file_is_not_locked.log, offset: 1299057	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:06:02.680-1000	DEBUG	[input]	log/input.go:618	File didn't change: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:06:02.680-1000	DEBUG	[input]	log/input.go:279	input states cleaned up. Before: 1, After: 1, Pending: 0	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:06:07.703-1000	DEBUG	[input.filestream]	filestream/filestream.go:131	End of file reached: C:\logs\this_file_is_locked.log; Backoff now.	{"id": "CF67A88CA0B8B687", "source": "filestream::.global::native::393216-107972-3459600828", "path": "C:\\logs\\this_file_is_locked.log", "state-id": "native::393216-107972-3459600828"}
2021-11-22T09:06:12.286-1000	INFO	[file_watcher]	filestream/fswatch.go:137	Start next scan
2021-11-22T09:06:12.286-1000	DEBUG	[file_watcher]	filestream/fswatch.go:204	Found 1 paths
2021-11-22T09:06:12.739-1000	DEBUG	[input]	input/input.go:139	Run input
2021-11-22T09:06:12.739-1000	DEBUG	[input]	log/input.go:215	Start next scan	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:06:12.739-1000	DEBUG	[input]	log/input.go:465	Check file for harvesting: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:06:12.739-1000	DEBUG	[input]	log/input.go:563	Update existing file for harvesting: C:\logs\this_file_is_not_locked.log, offset: 1299057	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:06:12.739-1000	DEBUG	[input]	log/input.go:618	File didn't change: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:06:12.739-1000	DEBUG	[input]	log/input.go:279	input states cleaned up. Before: 1, After: 1, Pending: 0	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:06:17.717-1000	DEBUG	[input.filestream]	filestream/filestream.go:131	End of file reached: C:\logs\this_file_is_locked.log; Backoff now.	{"id": "CF67A88CA0B8B687", "source": "filestream::.global::native::393216-107972-3459600828", "path": "C:\\logs\\this_file_is_locked.log", "state-id": "native::393216-107972-3459600828"}
2021-11-22T09:06:22.302-1000	INFO	[file_watcher]	filestream/fswatch.go:137	Start next scan
2021-11-22T09:06:22.302-1000	DEBUG	[file_watcher]	filestream/fswatch.go:204	Found 1 paths
2021-11-22T09:06:22.741-1000	DEBUG	[input]	input/input.go:139	Run input
2021-11-22T09:06:22.741-1000	DEBUG	[input]	log/input.go:215	Start next scan	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:06:22.742-1000	DEBUG	[input]	log/input.go:465	Check file for harvesting: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:06:22.742-1000	DEBUG	[input]	log/input.go:563	Update existing file for harvesting: C:\logs\this_file_is_not_locked.log, offset: 1299057	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:06:22.742-1000	DEBUG	[input]	log/input.go:618	File didn't change: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:06:22.742-1000	DEBUG	[input]	log/input.go:279	input states cleaned up. Before: 1, After: 1, Pending: 0	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:06:27.731-1000	DEBUG	[input.filestream]	filestream/filestream.go:131	End of file reached: C:\logs\this_file_is_locked.log; Backoff now.	{"id": "CF67A88CA0B8B687", "source": "filestream::.global::native::393216-107972-3459600828", "path": "C:\\logs\\this_file_is_locked.log", "state-id": "native::393216-107972-3459600828"}
2021-11-22T09:06:32.268-1000	INFO	[monitoring]	log/log.go:184	Non-zero metrics in the last 30s	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":906,"time":{"ms":46}},"total":{"ticks":999,"time":{"ms":61},"value":999},"user":{"ticks":93,"time":{"ms":15}}},"handles":{"open":189},"info":{"ephemeral_id":"fd66f199-aedd-4d05-9e17-b47a64844c3d","uptime":{"ms":390201},"version":"7.15.1"},"memstats":{"gc_next":19569872,"memory_alloc":9804976,"memory_total":58558448,"rss":6234112},"runtime":{"goroutines":34}},"filebeat":{"harvester":{"open_files":0,"running":0}},"libbeat":{"config":{"module":{"running":0}},"output":{"events":{"active":0}},"pipeline":{"clients":2,"events":{"active":0}}},"registrar":{"states":{"current":1}}}}}
2021-11-22T09:06:32.284-1000	INFO	[file_watcher]	filestream/fswatch.go:137	Start next scan
2021-11-22T09:06:32.284-1000	DEBUG	[file_watcher]	filestream/fswatch.go:204	Found 1 paths
2021-11-22T09:06:33.004-1000	DEBUG	[input]	input/input.go:139	Run input
2021-11-22T09:06:33.004-1000	DEBUG	[input]	log/input.go:215	Start next scan	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:06:33.004-1000	DEBUG	[input]	log/input.go:465	Check file for harvesting: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:06:33.004-1000	DEBUG	[input]	log/input.go:563	Update existing file for harvesting: C:\logs\this_file_is_not_locked.log, offset: 1299057	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:06:33.004-1000	DEBUG	[input]	log/input.go:618	File didn't change: C:\logs\this_file_is_not_locked.log	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee", "source": "C:\\logs\\this_file_is_not_locked.log", "state_id": "native::327680-101159-3459600828", "finished": false, "os_id": "327680-101159-3459600828", "old_source": "C:\\logs\\this_file_is_not_locked.log", "old_finished": true, "old_os_id": "327680-101159-3459600828"}
2021-11-22T09:06:33.004-1000	DEBUG	[input]	log/input.go:279	input states cleaned up. Before: 1, After: 1, Pending: 0	{"input_id": "b20c3fc0-de0e-4997-b28d-43a01c16f1ee"}
2021-11-22T09:06:33.249-1000	DEBUG	[service]	service/service.go:65	Received svc stop/shutdown request
2021-11-22T09:06:33.252-1000	INFO	beater/filebeat.go:515	Stopping filebeat
2021-11-22T09:06:33.256-1000	DEBUG	[publisher]	pipeline/client.go:158	client: closing acker
2021-11-22T09:06:33.258-1000	DEBUG	[publisher]	pipeline/client.go:163	client: done closing acker
2021-11-22T09:06:33.258-1000	DEBUG	[publisher]	pipeline/client.go:165	client: unlink from queue
2021-11-22T09:06:33.258-1000	DEBUG	[publisher]	pipeline/client.go:187	client: cancelled 0 events
2021-11-22T09:06:33.258-1000	DEBUG	[publisher]	pipeline/client.go:167	client: done unlink
2021-11-22T09:06:33.258-1000	DEBUG	[publisher]	pipeline/client.go:170	client: closing processors
2021-11-22T09:06:33.260-1000	DEBUG	[publisher]	pipeline/client.go:175	client: done closing processors
2021-11-22T09:06:33.254-1000	INFO	beater/crawler.go:148	Stopping Crawler
2021-11-22T09:06:33.260-1000	INFO	beater/crawler.go:158	Stopping 2 inputs
2021-11-22T09:06:33.261-1000	INFO	[crawler]	beater/crawler.go:163	Stopping input: 14945099210397628039
2021-11-22T09:06:33.263-1000	INFO	[input.filestream]	compat/compat.go:132	Input 'filestream' stopped	{"id": "CF67A88CA0B8B687"}
2021-11-22T09:06:33.264-1000	INFO	[crawler]	beater/crawler.go:163	Stopping input: 8641568387620582453
2021-11-22T09:06:33.264-1000	INFO	input/input.go:136	input ticker stopped
2021-11-22T09:06:33.265-1000	INFO	beater/crawler.go:178	Crawler stopped
2021-11-22T09:06:33.265-1000	INFO	[registrar]	registrar/registrar.go:132	Stopping Registrar
2021-11-22T09:06:33.265-1000	INFO	[registrar]	registrar/registrar.go:166	Ending Registrar
2021-11-22T09:06:33.277-1000	INFO	[input.filestream]	filestream/input.go:320	Reader was closed. Closing.	{"id": "CF67A88CA0B8B687", "source": "filestream::.global::native::393216-107972-3459600828", "path": "C:\\logs\\this_file_is_locked.log", "state-id": "native::393216-107972-3459600828"}
2021-11-22T09:06:33.278-1000	DEBUG	[publisher]	pipeline/client.go:158	client: closing acker
2021-11-22T09:06:33.278-1000	DEBUG	[publisher]	pipeline/client.go:163	client: done closing acker
2021-11-22T09:06:33.278-1000	DEBUG	[publisher]	pipeline/client.go:165	client: unlink from queue
2021-11-22T09:06:33.278-1000	DEBUG	[publisher]	pipeline/client.go:187	client: cancelled 0 events
2021-11-22T09:06:33.278-1000	DEBUG	[publisher]	pipeline/client.go:167	client: done unlink
2021-11-22T09:06:33.278-1000	DEBUG	[publisher]	pipeline/client.go:170	client: closing processors
2021-11-22T09:06:33.278-1000	DEBUG	[publisher]	pipeline/client.go:175	client: done closing processors
2021-11-22T09:06:33.278-1000	DEBUG	[input.filestream]	input-logfile/harvester.go:219	Stopped harvester for file	{"id": "CF67A88CA0B8B687", "source": "filestream::.global::native::393216-107972-3459600828"}
2021-11-22T09:06:33.279-1000	DEBUG	[input.filestream]	filestream/prospector.go:141	Prospector has stopped	{"id": "CF67A88CA0B8B687", "prospector": "file_prospector"}
2021-11-22T09:06:33.279-1000	INFO	[input.filestream]	compat/compat.go:124	Input 'filestream' stopped	{"id": "CF67A88CA0B8B687"}
2021-11-22T09:06:33.280-1000	DEBUG	[input.filestream]	filestream/input.go:143	Closing reader of filestream	{"id": "CF67A88CA0B8B687", "source": "filestream::.global::native::393216-107972-3459600828", "path": "C:\\logs\\this_file_is_locked.log", "state-id": "native::393216-107972-3459600828"}
2021-11-22T09:06:33.286-1000	DEBUG	[registrar]	registrar/registrar.go:167	Stopping Registrar
2021-11-22T09:06:33.286-1000	INFO	[registrar]	registrar/registrar.go:137	Registrar stopped
2021-11-22T09:06:33.449-1000	INFO	[monitoring]	log/log.go:192	Total metrics	{"monitoring": {"metrics": {"beat":{"cpu":{"system":{"ticks":953,"time":{"ms":953}},"total":{"ticks":1046,"time":{"ms":1046},"value":1046},"user":{"ticks":93,"time":{"ms":93}}},"handles":{"open":187},"info":{"ephemeral_id":"fd66f199-aedd-4d05-9e17-b47a64844c3d","uptime":{"ms":391241},"version":"7.15.1"},"memstats":{"gc_next":19569872,"memory_alloc":10040136,"memory_sys":31759576,"memory_total":58793608,"rss":9338880},"runtime":{"goroutines":15}},"filebeat":{"events":{"active":0,"added":1,"done":1},"harvester":{"closed":0,"open_files":0,"running":0,"skipped":0,"started":0},"input":{"log":{"files":{"renamed":0,"truncated":0}},"netflow":{"flows":0,"packets":{"dropped":0,"received":0}}}},"libbeat":{"config":{"module":{"running":0,"starts":0,"stops":0},"reloads":0,"scans":0},"output":{"events":{"acked":0,"active":0,"batches":0,"dropped":0,"duplicates":0,"failed":0,"toomany":0,"total":0},"read":{"bytes":0,"errors":0},"type":"elasticsearch","write":{"bytes":0,"errors":0}},"pipeline":{"clients":0,"events":{"active":0,"dropped":0,"failed":0,"filtered":1,"published":0,"retry":0,"total":1},"queue":{"acked":0,"max_events":4096}}},"registrar":{"states":{"cleanup":0,"current":1,"update":1},"writes":{"fail":0,"success":1,"total":1}},"system":{"cpu":{"cores":1}}}}}
2021-11-22T09:06:33.452-1000	INFO	[monitoring]	log/log.go:193	Uptime: 6m31.4037962s
2021-11-22T09:06:33.452-1000	INFO	[monitoring]	log/log.go:160	Stopping metrics logging.
2021-11-22T09:06:33.453-1000	INFO	instance/beat.go:479	filebeat stopped.