This documentation contains work-in-progress information for future Elastic Stack and Cloud releases. Use the version selector to view supported release docs. It also contains some Elastic Cloud serverless information. Check out our serverless docs for more details.
Step 4
editStep 4
editThe events produced by filestream
input with take_over: true
contain a take_over
tag.
You can filter on this tag in Kibana and see the events which came from a filestream in the "take_over" mode.
Once you start receiving events with this tag, you can remove take_over: true
and restart the fileinput again.