We are facing this kind of problem occasionaly that once some ES nodes failed, the Logstash output plugin will insert some data repeatedly to this ES cluster.
The data were extracted from kafka by Logstash too.
The ELK version is 5.4.1.
Does anyone has this problem also? If so, your solution is very appreciated.