I have installed filebeat on different nodes to send /var/log/messages to logstash which is in turn sends to elasticsearch and then to Kibana for display. What I do not see is that on the Kibana Discover and Dashboard, no updates happen in realtime. What I mean is that when /var/log/messages file adds messages, nothing is shown on Kibana. I have to reset the time to Now and then it shows. What I am looking for is for this data to show up in realtime with out me reloading or resetting anything.
Sorry forgot to add that I seem to have to restart filebeat for the updates to showup on kibana.
Any help will be greatly appreciated.
Thanks and Regards