This looks to be exactly the situation I am encountering, since we added in load-balancing, we have begun receiving duplicate lines from our filebeats instance across two logstash servers. Do you know if there are things I can do to either speed up the rate that an instance communicates back, or tell instances to wait for each other??