If filebeat running on application server and kafka/logstash will stop working , what will happen in that case ?
logs data will come to kafka/logstash once we start logstash\kafka process? or there will be data loss ?
Filebeat will stop reading until it can continue to send events. As long as files do not roll over there should be no data loss.