Disable index template overwrite
zgodnie z dokumentacją:
setup.template.overwrite A boolean that specifies whether to overwrite the existing template. The default is false. Do not enable this option if you start more than one instance of Filebeat at the same time. It can overload Elasticsearch by sending too many template update requests.
https://www.elastic.co/guide/en/beats/filebeat/7.10/configuration-template.html
Tak więc ustawmy setup.template.overwrite
na false.