Hi guys,
I am having issue with ELK stack, specially with CDN data.
The problem is event count is, let me explore.
Basically, I've ELK setup on prod which has 6.3 version, when I'm starting the filebeat agent on CDN host to send the logs to logstash it is working fine till 1 M event count ( probably for 10 mins ) and as soon as it reached 1 M event count the filebeat agent stop sending the data, I'm not sure what exactly the problem is - did anyone find such kind of behaviour with ELK ?