Filebeat/elasticsearch create daily index

Elastic Stack Beats
1

Hi, im trying create per day index with filebeat.
Can you help me? Here is part of filebeat.yml file

  output.elasticsearch:
      # Array of hosts to connect to.
      hosts: ["test2019:9200"]
      pipeline: "logpipeline" 
      #index: "upg-prod-raw-%{+yyyy.MM.dd.HH}"
      #ilm.enabled: true
      # ilm.rollover_alias: "upg-prod-raw"
      #ilm.pattern: "{now/d{yyyy-MM-dd}}" 
      
      
    setup.template:
      enabled: true

    setup.ilm.enabled: true
    output.elasticsearch.index: "upg-prod-raw-%{+yyyy-MM-dd}"
    setup.template.name: "upg-prod-raw"
    setup.template.pattern: "upg-prod-raw-"

Reuslt :

image
image1213×423 38.1 KB

2

You have output.elasticsearch.index defined in output.elasticsearch. Try to change the first one to index.

3

Thank you!