Good day.
I would like to configure dynamic naming for indices. My filebeat instance is writing data to logastash which is writing to elasticsearch. My configuration is looking like that:
output.logstash:
hosts:
- elk16:5044
- elk17:5044
- elk18:5044
- elk19:5044
- elk20:5044
- elk21:5044
- elk22:5044
- elk23:5044
- elk24:5044
- elk25:5044
loadbalance: true
index: "test-%{+yyyy.MM.dd}"
The problem is that in this kind of configuration index field is interpreted as a string instead of a variable and inside elasticsearch index is created as test-%{+yyyy.MM.dd} instead of test-2021.02.24. What I'm doing wrong? Thanks.