Data in old index has grok working, but new data in old index doesnt

I created an index 2 days ago, and that has some data in it. The groks were being applied on it and fields created. But now I ran my logstash, filebeat, kibana again with same index named and new data does not have grok applied to it.

But when I set interval of log collected in discover tab,to 48 hours, my index shows fields. But when i set it for today, it doesnt show fields. No changes were made in old index configurations.

@Badger Would you gave an idea why this is happening?

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.