Functionbeat Sending to Wrong Index

Elastic Stack Beats
1

I'm attempting to change the index that FunctionBeat sends to. Here is my configuration:

functionbeat.provider.aws.deploy_bucket: "gatsby-deploy"
functionbeat.provider.aws.functions:
  - name: EcsStagingLogs
    enabled: true
    type: cloudwatch_logs
    description: "Lambda function for transferring 'staging' logs from Cloudwatch 'ecs/staging' to ELK stack."
    triggers:
      - log_group_name: /ecs/staging

cloud.id: "Logs:{cloudinfo}"
cloud.auth: "elastic:{cloudpassowrd}"
setup.template.overwrite: true
setup.template.name: "ecs_staging"
setup.template.pattern: "ecs_staging-*"
output.elasticsearch.index: "ecs_staging-%{+yyyy.MM.dd}"

processors:
 - decode_json_fields:
     fields: ["message"]
     process_array: false
     max_depth: 3
     target: ""
     overwrite_keys: true

It appears to be working, but sends logs to "functionbeat-7.1.1" with no date component to the index.

1 Like
2

This topic was automatically closed 20 days after the last reply. New replies are no longer allowed.