One file come five times in output

It seems like you only post an excerpt of the output. It could be that before or after the additional 4 events are sent. Here you can find more details what you should report when opening an issue: Beats: How to report an issue

Please be patient when posting question, reposting will only flood inboxes more. If you need commercial support, check out the subscriptions: https://www.elastic.co/subscriptions