I have inserted few logs in ES using logstash. But when I check the count of actual log and data inserted in ES, it is not matching. Seems like logstash is dropping few messages.
If I check the count in kibana using "ab.cd:device", I get 2000
count of cd=device gives 2001
So my question is where is my 1 log and why is it not showing in first query.