Merge pull request #2830 from Security-Onion-Solutions/filebeatlimits

Make filebeat retry forever

salt/filebeat/etc/filebeat.yml

@@ -440,7 +440,7 @@ setup.template.enabled: false
   # The number of times a particular Elasticsearch index operation is attempted. If
   # the indexing operation doesn't succeed after this many retries, the events are
   # dropped. The default is 3.
-  #max_retries: 3
+  max_retries: -1
 
   # The maximum number of events to bulk in a single Elasticsearch bulk API index request.
   # The default is 50.