I have following setup: version 7.3.1
A Live System logs into a csv
With xcopy.bat I copy this csv every 5 Minutes to my ES Server to a specific folder.
Beats is whatching to that csv file in that specific folder.
Logstash is listen to Beats and write to my index!
I know its better to have Beats installed within Live System but this setup has been going on for a very long time without any problem or duplicated entries!
But since a few days I got thousends of duplicated logs in my index
Wow, thats spooky!
What could have caused this? My Setup not changed!
Any suggestion ?