I have a docker swarm cluster with 3 nodes. I set up a elasticsearch, kibana and filebeat as docker swarm services. These three swarm services are running without an error. A datastream is created by filebeat but no logs are updated in this datastream. Filebeat is deployed as “mode: global”.