At first I added /var/log/filebeat/filebeat as an input in the "inputs.d/filebeat.yml" folder.
This created a circular logging issue; ie filebeat would write data to the filebeat log file then re-read that log event in the filebeat log and send it again and then the round robin thing happens.
I stopped filebeat
I removed the inputs.d/filebeat.yml
I renamed the filebeat cache registry folder "mv registry registry.old.0325"
I then restarted filebeat service
I still see filebeat reading in the filebeat logs.
What did I miss?