Filebeat-* in Filebeat, Kibana

(Евгений) #1

I'm new to ELK and going through ELK documentation and setup i got confused:

what is the difference between "template": "filebeat-* " in /etc/filebeat/filebeat.template.json,
"index => ["filebeat-%{+YYYY.MM.dd}"]" in /etc/logstash/conf.d/logstash.conf
and "filebeat-* " in Management -> Kibana -> Indices (app/kibana#/management/kibana/indices/filebeat-*?_g=()&_a=(tab:indexedFields)) ?
What each of above is responsible for?

(system) #2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.