Can't rename index

Elastic Stack Beats
1

Good day! i using elasticsearch & kibana & filebeat agent latest versions, and i can't setup index name, every time the index call "filebeat-7.6.2" and i don't understand why... i tried setup my agent from the documentation or elastic discus topics.... help please, my config filebeat is:

filebeat.inputs:
- type: log

# Change to true to enable this input configuration.
  enabled: true

# Paths that should be crawled and fetched. Glob based paths.
  paths:
    - /var/log/*.log
  
filebeat.config.modules:
  # Glob pattern for configuration loading
  path: ${path.config}/modules.d/*.yml

  # Set to true to enable config reloading
  reload.enabled: false

  # Period on which files under path should be checked for changes
  #reload.period: 10s

#Elasticsearch template setting

setup.template.settings:
  index.number_of_shards: 1
  #index.codec: best_compression
  #_source.enabled: false


#Kibana
setup.kibana:
  host: "192.168.237.128:5601"

#Elasticsearch output
output.elasticsearch:
  # Array of hosts to connect to.
  hosts: ["192.168.237.128:9200"]
  output.elasticsearch.index:: "postgresql-fb-%{+yyyy.MM.dd}"
  setup.template.name: "postgresql-fb"
  setup.template.pattern: "postgresql-fb-*"
  setup.template.enabled: true
1 Like
2

@My_Google_Account, the

      setup.template.name: "postgresql-fb"
      setup.template.pattern: "postgresql-fb-*"
      setup.template.enabled: true

should be outside the output.elasticsearch config option.
Also, line:
output.elasticsearch.index:: "postgresql-fb-%{+yyyy.MM.dd}"
should be
index:: "postgresql-fb-%{+yyyy.MM.dd}"
Can you try now?

3

i tryed, but again, same name filebeat-7.6.2

4

i saw in output after service started:
INFO [index-management] idxmgmt/std.go:182 Set output.elasticsearch.index to 'filebeat-7.6.2' as ILM is enabled.

i tryed disable ILM ... but same name again .... filebeat-7.6.2 or created with this name filebeat-7.6.2-2020.04.23-000001

5

i steel need help please!

1 Like
6

I can confirm this behaviour

7

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.