Hi Steffen,
Thanks for you answer.
First of all, the problem disappeared after I restarted operating system. Before that I restarted only filebeat and logstash and I always got the behaviour I described in my request.
After I restarted computer I can do the same steps as before and system works correctly.
Regarding your questions:
-
I updated file when I got response to the screen. I guess my reactions were not longer than 15 seconds. I behave the same way today and system works well.
-
I updated the file using VIM during my both unsuccessful and successful attempts.