OS: Windows
There's nothing bad in Elasticsearch log:
[2024-11-22T10:07:01,099][INFO ][o.e.c.m.MetadataIndexTemplateService] [SOME-PC] adding index template [wireshark_template] for index patterns [wireshark_template*]
[2024-11-22T10:07:01,854][INFO ][o.e.c.m.MetadataCreateIndexService] [SOME-PC] [.ds-wireshark_template-2024.11.22-000001] creating index, cause [initialize_data_stream], templates [wireshark_template], shards [1]/[1]
[2024-11-22T10:07:01,856][INFO ][o.e.c.m.MetadataCreateDataStreamService] [SOME-PC] adding data stream [wireshark_template] with write index [.ds-wireshark_template-2024.11.22-000001], backing indices [], and aliases []
[2024-11-22T10:07:02,614][INFO ][o.e.i.m.MapperService ] [SOME-PC] [.ds-wireshark_template-2024.11.22-000001] reloading search analyzers
[2024-11-22T10:07:02,617][INFO ][o.e.x.i.IndexLifecycleTransition] [SOME-PC] moving index [.ds-wireshark_template-2024.11.22-000001] from [null] to [{"phase":"new","action":"complete","name":"complete"}] in policy [filebeat]
[2024-11-22T10:07:03,528][INFO ][o.e.x.i.IndexLifecycleTransition] [SOME-PC] moving index [.ds-wireshark_template-2024.11.22-000001] from [{"phase":"new","action":"complete","name":"complete"}] to [{"phase":"hot","action":"unfollow","name":"branch-check-unfollow-prerequisites"}] in policy [filebeat]
[2024-11-22T10:07:03,758][INFO ][o.e.c.m.MetadataCreateIndexService] [SOME-PC] [packets-2024.11.22] creating index, cause [auto(bulk api)], templates [], shards [1]/[1]
[2024-11-22T10:07:04,182][INFO ][o.e.i.m.MapperService ] [SOME-PC] [packets-2024.11.22] reloading search analyzers
[2024-11-22T10:07:04,184][INFO ][o.e.x.i.IndexLifecycleTransition] [SOME-PC] moving index [.ds-wireshark_template-2024.11.22-000001] from [{"phase":"hot","action":"unfollow","name":"branch-check-unfollow-prerequisites"}] to [{"phase":"hot","action":"rollover","name":"check-rollover-ready"}] in policy [filebeat]
[2024-11-22T10:07:05,972][INFO ][o.e.c.m.MetadataMappingService] [SOME-PC] [packets-2024.11.22/gxiVA-L3SYeRLiAR7SVTnA] create_mapping
[2024-11-22T10:09:00,784][INFO ][o.e.c.m.MetadataDeleteIndexService] [SOME-PC] [packets-2024.11.22/gxiVA-L3SYeRLiAR7SVTnA] deleting index
[2024-11-22T10:13:49,783][INFO ][o.e.c.m.MetadataIndexTemplateService] [SOME-PC] adding index template [whireshark_template] for index patterns [packets-*]
[2024-11-22T10:14:11,156][INFO ][o.e.c.m.MetadataCreateIndexService] [SOME-PC] [.ds-packets-2024.11.22-2024.11.22-000001] creating index, cause [initialize_data_stream], templates [whireshark_template], shards [1]/[1]
[2024-11-22T10:14:11,156][INFO ][o.e.c.m.MetadataCreateDataStreamService] [SOME-PC] adding data stream [packets-2024.11.22] with write index [.ds-packets-2024.11.22-2024.11.22-000001], backing indices [], and aliases []
[2024-11-22T10:14:11,880][INFO ][o.e.i.m.MapperService ] [SOME-PC] [.ds-packets-2024.11.22-2024.11.22-000001] reloading search analyzers
[2024-11-22T10:14:12,665][INFO ][o.e.c.m.MetadataMappingService] [SOME-PC] [.ds-packets-2024.11.22-2024.11.22-000001/mivHZpsrT3SPnMclsdqRyg] update_mapping [_doc]
[2024-11-22T10:36:22,051][WARN ][o.e.t.ThreadPool ] [SOME-PC] timer thread slept for [9.7s/9748ms] on absolute clock which is above the warn threshold of [5000ms]
No more lines even after running
filebeat.exe -c filebeat.yml