I am new to using ELK.
I have the following configuration:
I have the following questions
When filebeat service is stopped while Logstash is still running and later when filebeat service is restarted, how does filebeat keep a track of the logs read already and from
where it has to start ?
When Logstash service is stopped while filebeat is running and later when Logstash service is restarted how the pending logs are sent to Logstash ?
Do I need to follow a particular order to start the services ?