ES output using ILM settings "Malformed escape pair at index"

Hi,

Using logstash 6.7, I'm switching from daily rotated indices to ILM, and am seeing an error when trying to template the ILM settings.

Error

java.net.URISyntaxException: Malformed escape pair at index 0: %{dest}-6.7.1

Config

input {
  stdin {  }
}

filter {
  mutate {
    add_field => { "dest" => "stdout" }
  }
}

output {
  elasticsearch {
    hosts => ["${ELASTICSEARCH_HOST:elasticsearch}:${ELASTICSEARCH_PORT:9200}"]
    user => "${ELASTICSEARCH_USERNAME:}"
    password => "${ELASTICSEARCH_PASSWORD:}"
    ....
    ilm_enabled => "true"
    ilm_rollover_alias => "%{dest}-${LOGSTASH_VERSION:6.X}"
    ilm_pattern => "000001"
    ilm_policy => "%{dest}-${LOGSTASH_VERSION:6.X}"
    manage_template => false
  }
}

Previously I had

...
    index => "%{dest}-${LOGSTASH_VERSION:6.X}-%{+YYYY.MM.dd}"
...

Are the ilm settings (such as ilm_rollover_alias) not allowed to use variables?

Thanks,
Justin

1 Like

Bumping this. Can anyone confirm or deny this?

Thanks, Justin

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.