I can't redirect output to a custom index

I can't redirect output to a custom index from a filebeat. It constantly loads the default filebeat template 7.3.1. Any idea where should I look? Logs are getting send to the filebeat-* index.

#==================== Elasticsearch template setting ==========================
setup.template.enabled: false
setup.template.name: 'NEW_INDEX_NAME'
setup.template.pattern: 'NEW_INDEX_NAME-*'
   index.number_of_shards: 1
#index.codec: best_compression
#_source.enabled: false
output.elasticsearch.index: "customname-%{[agent.version]}-%{+yyyy.MM.dd}"
setup.template.name: "customname"
setup.template.pattern: "customname-*"

I think output.elasticsearch.index is the setting you want here.


Add the following configuration to filebeat
"setup.ilm.enabled: false"

It's a known issue :slight_smile:

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.