Hi,
I realized the logs in "Discover" wasn't displayed the latest timestamp as it's shown 9 Apr logs instead of 18 Apr. I found out the error (due to missing authentication) and fixed that, so logs started coming in. I noticed the logs for metricbeat and winlogbeat are missing from 10-17 Apr, but the logs for logstash are showing 10-17 Apr. Is there something that holding the logs for metricbeat and winlogbeat to not show? And if so what's that so I can push it back to "Discover"?
Anyway I installed metricbeat and winlogbeat in 10.254.0.xxx and logstash in 10.254.1.yy.