Duplicate events with Filebeat on windows on service restart

[andrewkroh]

Thanks for showing the registry before and after.

This sounds similar to another post: Filebeat on Windows seem to not use the registry file

(edit: oh, just saw you posted there too. good)