Hi,
In my ELK setup, when filebeat is stopped for sometime, Kibana starts updating from the timestamp where the filebeat is started. No data available(under Disvover tab) for the filebeat not functioning timeframe. Once filebeat is started, there are spikes in "Discover" tab initially which means, data is updated under wrong time stamp.
How can I resolve this?