stephenb
December 25, 2022, 4:17am
10
Apologies I meant filebeat configuration and logstash pipeline configuration so.we can see what you are trying to write too...
Also how did you get started / setup?
Perhaps look at these two...I have other write ups on using
Filebeat -> Logstash -> Elasticsearch
Hi @st1988 Welcome the community and thanks for trying the Elastic Stack.
It can be a bit challenging the first time you enter into the stack we are working to make this easier with our new feet
So here is what I do
Macro I make Filebeat to Elasticsearch Work direct first then I route thought Logstash.... if you can not do that thats ok but that is the best way to check if every thing works before routing through logstash
1st) clean up if you have any filbeat indices as the may be not setup…
Or
@SirStephanikus
Nope that is not your issue in 8.3.3
I just ran setup with
setup.ilm.check_exists: false
./filebeat setup -e
and the mappings are correct
GET _cat/indices?v
health status index uuid pri rep docs.count docs.deleted store.size pri.store.size
yellow open .ds-filebeat-8.3.3-2022.09.06-000001 u3YyG9i_Sh2XduYtAaVloQ 1 1 0 0 225b 225b
GET .ds-filebeat-8.3.3-2022.09.06-000001/
{
".ds-fileb…
And this ..