I am seting up ELK
filebeat -> logstash -> elasticsearch -> kibana
I have 20 containers. 11 of which are showing in kibana. 9 are not.
I have noticed that the 9 containers which I dont see in kibana - all have log rotated few times per day. Do you think it could be the case here? May also be problem that logstash conf pipeline is setup incorrectly?
When I checked /var/log/filebeat/filebeat - it shows that harvester started for all the logs.