i using filebeat (lastest version) for shipping log IIS on windows server 2008.
I testing with IIS log file large (5GB). but i don't see log on ES ( don't create new indices becasue in config filebeat, i set new indices name - output Logstash). I wait 3 hours and recheck but don't have log on ES.
I try to with IIS log file smaller ( 15MB) and check on ES and see new Indices created. => Filebeat is working.
But don't understand , why not shipping large file ....