My filebeat config file has 5 prospectors.
Each one access a network path on one of five application servers.
Logs are being rotated.
The Filebeat sends the data to ingest node in Elastic.
While accessing the data using Kibana.
It seems that data is being received in Realtime from app_server_01, but from app_server_03, there is a long delay, like for 30 minutes and data has not been received yet.
After a while, the data does get indexed in Elastic Search.
I need to have it all in as close as it can be to Real Time.
What can be checked for the Configuration ?
What can cause such a delay on one machine, and no delay on the other (Using same FB, different prospectors accessing the files) ?