# Cluster name is logged as ${sys:es.logs.cluster\_name}

**URL:** https://discuss.elastic.co/t/cluster-name-is-logged-as-sys-es-logs-cluster-name/385225
**Category:** Elasticsearch
**Created:** [February 25, 2026, 2:03pm UTC](https://discuss.elastic.co/t/cluster-name-is-logged-as-sys-es-logs-cluster-name/385225 "2026-02-25T14:03:32Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![CD9820](https://avatars.discourse-cdn.com/v4/letter/c/e9c0ed/32.png) [@CD9820](https://discuss.elastic.co/u/CD9820)
#### Post date: [February 25, 2026, 2:03pm UTC](https://discuss.elastic.co/t/cluster-name-is-logged-as-sys-es-logs-cluster-name/385225/1 "2026-02-25T14:03:32Z")

</div>

Hello

we are upgrading our Elastic clusters to 9.2.5.  
I upgraded my monitoring cluster from 8.19.4 to 8.19.11, since this upgrade the cluster\_name in the elasticsearch server logs is logged as ${sys:es.logs.cluster\_name}  
I then upgraded the monitoring cluster to 9.2.5 but the problem still remains, cluster name is logged as ${sys:es.logs.cluster\_name}

How can I solve this issue?

Best regards  
Christophe

---

<div class="post-metadata">

### Author: ![willemdh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/willemdh/32/16922_2.png) [@willemdh](https://discuss.elastic.co/u/willemdh)
#### Post date: [February 25, 2026, 9:17pm UTC](https://discuss.elastic.co/t/cluster-name-is-logged-as-sys-es-logs-cluster-name/385225/2 "2026-02-25T21:17:45Z")

</div>

Fyi, I have seen the same issue on multiple clusters after update to 9.2.4 or higher.

---

<div class="post-metadata">

### Author: ![orion-ua](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/orion-ua/32/122030_2.png) [@orion-ua](https://discuss.elastic.co/u/orion-ua)
#### Post date: [May 14, 2026, 1:45pm UTC](https://discuss.elastic.co/t/cluster-name-is-logged-as-sys-es-logs-cluster-name/385225/3 "2026-05-14T13:45:35Z")

</div>

Same on my clusters on v9.2.4.