Hi All,
Duplicate data is sent from Filebeat.
When I start the elastic agent, I can see two filebeat processes running. If I Kill the first one it auto restarts and the second one disappears when I kill it twice. Once the second process is killed, there are no duplicate data coming in.
Am I missing any configuration here?
Elastic Agent version 8.3.3
Filebeat.yml
filebeat.inputs:
- type: log
enabled: true
paths:
- C:\MVD2\Logs\ECS*.log
json.keys_under_root: true
json.overwrite_keys: true
json.add_error_key: true
json.expand_keys: true