I'm using ELK stack in docker swarm with 6 filebeat, 1 logstash, 1 elasticsearch and 1 kibana.
All is in version 7.6.1.
I have a problem when receiving data (cf the photo below)
All logs are sending with empty data.
I have setup logstash with stdout rubydebug and I see all logs parsed with data
Here my monitoring stack:
I had this problem yesterday and delete all index to get logs with data but today it started again and delete index doesnt work and I think it's not the problem.
Feel free to ask me more information like config, params, etc