We have filebeat 5.4.0 installed , it seems when we update the DNS record that points to our logstash servers the filebeat agent needs to be restarted before it will use the updated DNS record.
The hosts filebeat is installed on (mix of Ubuntu & RHEL) resolves the correct address when using the DNS name. But filebeat does not, until restart.
Can anyone tell me if filebeat caches the host entry from the filebeat.yml when it starts and if there is a refresh period if it does?
If it does not cache this entry has anyone seen this behavior?