So I updated filebeat on a couple machines and got an error:
"reason"=>"pipeline with id [filebeat-7.17.4-system-syslog-pipeline] does not exist"
After doing some digging, this was because I was previosuly using version 7.17.3.
So I had to manually create a new Ingest Pipeline with:
sudo filebeat setup -E output.logstash.enabled=false -E output.elasticsearch.hosts=['EMEA-ES-01.mydomain.com:9200'] -E setup.kibana.host=EMEA-kibana-01.mydomain.com:5601
Is there an easier/automated way to go about doing this when filebeat upgrades to a new version in the future?