Filebeat not indexing data correctly " %{[@metadata][beat]}- "


I have filebeat sending logs from syslog, nginx, php slow logs, and authlog. For some reason the metadata is being ripped and instead of the filebeat indexing beat-date. I'm getting a double output with this index name %{[@metadata][beat]}-. I can post all my configs if necessary. Thank you !

(Andrew Kroh) #2

Closing. It's a duplicate posting. Elastic not indexing correctly. Showing "%{[@metadata][beat]}-

(Andrew Kroh) #3