At first I thought it was due to legacy monitoring still active, I switched to metricbeats in any case, but it still does not show the events in the processing pipeline.
The overview screen shows received and emitted events counts alright.
Looks like the issue is the following:
- We have two nodes running logstash, usually the second one is pretty much inactive and exists for HA purposes
- Pipeline on both nodes is called "main"
- When I go to Stack Monitoring -> Logstash -> Nodes -> Node 1 -> Pipelines -> main, and compare that URL to the one of Node 2 it is the same.
This leads me to the conclusion that only the pipeline of Node 2 is ever shown, for which it is correct that there are 0 e/s as explained above.
Is this a bug?
(Workaround: I have renamed the pipelines on both nodes to be unique)