I need some help with strange behaviour of Filebeat vs Elastic.
I have AKS cluster (K8S 1.28.9) with stack: Elastic + Filebeat + Logstash (I have disabled it not to mess with Filebeat – it’s not serving any reqs).
What I suffer from is that if I delete index in Elastic (after flush + clean) and restart Filebeat it updates all logs from certain period and than stops.
I have checked almost every possibility form internet but no success.
What is wrong with config?