Duplicate data from filebeat (input type: log)

Hi All,

Duplicate data is sent from Filebeat.
When I start the elastic agent, I can see two filebeat processes running. If I Kill the first one it auto restarts and the second one disappears when I kill it twice. Once the second process is killed, there are no duplicate data coming in.
Am I missing any configuration here?

Elastic Agent version 8.3.3



- type: log
  enabled: true
    - C:\MVD2\Logs\ECS*.log
  json.keys_under_root: true
  json.overwrite_keys: true
  json.add_error_key: true
  json.expand_keys: true

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.