I’ve been having an issue on my logstash node where about 5 log sources (linux servers) are generating about 30 logstash-plain.log files every day, each with about 20-30k lines.
About 99% of these logs consist of the same error which always references one of five field names and appears on indexes generated for one of the 5 log sources.