The data I recently entered in the Filebeat YAML file is not appearing in the index patterns. However, the old data is still visible, and I can successfully map it in the index patterns.
Filebeat on win machine.
Filebeat restarted multiple times.
YML file recreated and word format verified.
Sorry to hear you are having issues. Had anything changed at the time that data ingestion stopped? Have you looked for any error messages in the filebeat logs or Elasticsearch logs?
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.