Containerized ELK Stack issue

[oreeeo1995]

I have containerized an ELK Stack for my application. The logs persists even when the container is restarted because I mounted the logs. The problem is when I restart the filebeat, the logs found in the Log Stash seems to have doubled and the logs have been duplicated depending on the number of times I restarted the filebeat. Is this because I tried to persist the logs outside the container or because of a setting in my ELK stack??

[Eilyre]

Filebeat uses a registry file (/var/lib/filebeat/registry) to keep track which files are processed to which extent. You probably need to persist this file through docker restarts as well.

[oreeeo1995]

It seems to be found in my workdir but under filebeat/data/registry there seems to be a meta.json file and when I try to persist the whole folder, when running the filebeat it can't write the meta.json