Auditbeat custom index name not working

Elastic Stack Beats
1

Hi All,
I am planning to add my own custom index name (auditlogs instead of default auditbeat) of index for auditbeat but somehow its not working. Below are the configs that I have related to ES & Kibana, am I doing something wrong here or missing anything? FYI - I have not written any templates of my own but will load default inbuilt template available

setup.dashboards.index: "auditlogs-*"
host: "kibanahost:5601"
output.elasticsearch:
  # Array of hosts to connect to.
  hosts: ["http://eshost1:9200"]
  index: "auditlogs-%{[agent.version]}-%{+yyyy.MM.dd}"
  setup.template.enabled: "true"
  setup.template.name: "auditlogs"
  setup.template.pattern: "auditlogs-*"
logging.level: debug
logging.selectors: ["*"]
2

Can anyone point me where I am going wrong? Appreciate your help

3

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.