I have filebeat sending logs from syslog, nginx, php slow logs, and authlog. For some reason the metadata is being ripped and instead of the filebeat indexing beat-date. I'm getting a double output with this index name %{[@metadata][beat]}-. I can post all my configs if necessary. Thank you !