Hello, im trying to get the elasticsearch input plugin to look at the previous days index. it seems to only like the wildcard or a full index name in the field. has anyone been able to change the date on the index for the plugin? index => "indexname-%{+YYY.MM.dd}" gives an error of no such index e…

Elasticsearch input plugin index date

Scoyle August 24, 2018, 11:56am 3

I was thinking that might be the case. would you just query indexname-{now/d-1d{YYY.MM.dd}}?

Topic		Replies	Views
Calculating before input plugin Logstash	2	503	August 1, 2017
Elasticsearch Filter - Daily index search Logstash	1	289	May 31, 2019
Elasticsearch Input Plugin - Index field string to match system date Logstash	4	1863	July 6, 2017
Reading previous week indice with elastic input plugin Logstash	4	679	November 8, 2017
Elasticsearch filter - Search previous days index Logstash	2	602	April 8, 2020

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Elasticsearch input plugin index date

Related topics