I am using Beats to ship entries from log files to Logstash. I have aggregations in Logstash that are order dependent. I cannot seem to find a way to control the order that Beats processes my log files or the individual entries within the log files. Is this even possible or should I think of a new way to accomplish my task?
Did you see the note about setting workers to 1?
Yes I am using this setting in Logstash. When I do not use Beats to ship and just read from filepath in Logstash file input, the order is good. When I use Beats as input, the order is changed on some entries. Is there a similar setting to control the order in Beats?
What does your filebeat config look like?