Filebeat 8.8.0 error loading template: failed to put data stream: could not put data stream: 400 Bad Request

[stephenb (Stephen Brown)]

Actually, you can get filebeat to automatically create and set up a template based on the filebeat base template.

I think I have an example of it here

Filebeat 8.3

@abaltan Does the above help or do you have a more specific question. auto is no longer a valid setting it was a valid setting in 7.x ... in the Past 7.x auto was (the default) is specified on version 7.0 and later, Filebeat automatically uses index lifecycle management if the feature is enabled in Elasticsearch and has the required license; > otherwise, Filebeat creates daily indices. true and false is much cleaner now Either true you use the setting in the filebeat.yml or false you do not…