hi
we have system with Logstatsh that read from shared repository once a day (30GB).on the logstash we see that filter is working and logs are proccesd but the info is shown only after few hours on the Elastic??any thought why?isnt it inedex near real time?we dont have any error in elastic or logstash