Changing index pattern refuses to start

according to: Configure the Elasticsearch output | Winlogbeat Reference [master] | Elastic

But if I add

index: "winlogbeat-%{[beat.version]}-%{+yyyy.MM.dd}"

winlogbeat do not start up

needed to add to winlogbeat.yml: 'winlogbeat-%{[beat.version]}'
  setup.template.pattern: 'winlogbeat-%{[beat.version]}-*'

They seem very default to me.

Anytime you change the output.elasticsearch.index you also need to configure the and setup.template.pattern to ensure they are all pointing at the right index.

1 Like

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.