I have one query regarding the data pushed by filebeat to logstash.
When I am opening and saving the log file, filebeat is resending all the data from the begining of the log. Is this the expected behaviour ? How can we overcome this?
When I am pushing one line without opening the file, it is working fine by sending the new data only. but resending all data when i am writting one line by opening the log file.