Elasticsearch starting creating extra indices

Elastic Stack Beats
1

A few weeks ago I upgraded from 5.6.6 to 6.1.2. A few days ago elasticsearch started creating some extra indices.
For example, today instead of just the usual winlogbeat index "winlogbeat-2018.02.06" there is also "winlogbeat-6.1.2-2018.02.06".

Everything seems to be working, cluster is green, etc. Any ideas why it started doing this? Or how to make it stop?

Thanks.

2

Question moved to #beats:winlogbeat

3

I think winlogbeat-6.1.2-2018.02.06 is the new default naming convention when Beats are writing directly to Elasticsearch, while the winlogbeat-2018.02.06 pattern is commonly used in many example Logstash configs. It may also be an older version of Winlogbeat.

1 Like
4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.