I have noticed one more issue where packetbeat is not sending data for connection timeouts on nginx running on application servers. So whenever there is any 504 on nginx logs there is no corresponding log in packetbeats.
Is that mean packetbeat is not catering connection timeouts ??
Every other http response code looks like working fine but looks like all 50X response codes got some monitoring problem.