Filebeat setup error

Hi there.

After upgrading to Filebeat 7.15 i get this error on filebeat setup

root@suricata:~# sudo filebeat setup
Overwriting ILM policy is disabled. Set `setup.ilm.overwrite: true` for enabling.

Index setup finished.
Loading dashboards (Kibana must be running and reachable)
Exiting: 1 error: error setting index 'suricata-ids-*' in index pattern: empty index pattern

I dont want to use the default filebeat index and my config is like this (which was perfect on the previous version)

setup.ilm.enabled: auto
setup.ilm.rollover_alias: "suricata-ids" #Write your alias
setup.ilm.pattern: "{now/d}-000001" "suricata-ids"
setup.template.pattern: "suricata-ids-*"
setup.dashboards.index: "suricata-ids-*"

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.