I noticed that some logs are missing when I collect the channel "Forwarded Events" of my central log collector
Here is my test.
1-Logs are well forwarded from my client (SRV-2012) to the central log collector (W2012-COLLECTOR) :
2-Only few logs are received in Kibana :
3-Here is the misisng events :
It looks like it works better with own logs of the central log collector. To test I generated logon error and all have been received
I saw this github issue : https://github.com/elastic/beats/issues/3731 but didn't helped me
Did you have the same behavior ? Do you know a workaround or a fix ?
Thanks for your help !