I have a logstash-forwarder client sending events to lumberjack -> elasticsearch to timestamped logstash indices. How does logstash decide what day index to put the document in. Does it look at @timestamp? @timestamp is just generated when the document is received, correct? So if you logged a…

How does logstash chose which timestamped index to use?

Topic		Replies	Views
Logstash Output to Elasticsearch using todays date instead of @timestamp Logstash	6	2961	June 3, 2020
ElasticSearch indexing events from previous date into current date logstash-* folder Logstash	6	2011	July 6, 2017
Logstash => ES, Timezone and IndexName Logstash	4	2709	August 22, 2017
Question Regarding `index` in logstash elasticsearch output plugin Logstash	3	513	February 22, 2018
Indexes creation by date issue Logstash	10	9950	November 7, 2017

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

How does logstash chose which timestamped index to use?

Related topics