Elastic
/ Reference
/ Ingestion tools
/ Beats
/ Filebeat
/ How to guides
/ Migrate log input configurations to filestream
/

Debugging on Kibana

Events produced by filestream with take_over: true contains take_over tag. You can filter on this tag in Kibana and see the events which came from a filestream in the "take over" mode.