Filebeat publishing events delay (windows)

I'm working with Filebeat on a system that collects log events from files on a windows endpoint and sends them directly to elastic

while using Filebeat I have noticed it has a big delay of a few seconds until the data gets sent to elastic, as well as every time the prospector sends a set of events , the last document gets indexed with a additional delay

I'm working on a monitoring system that requires the logs to be indexed as fast as possible (near real-time)

can someone please help me

Can you share some more things?

  • Filebeat config
  • Filebeat version
  • Architecture you are using

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.