Index output not generated to ElasticSearch

In my filter I did:

mutate {
                     add_field => { "[@metadata][indexname]" => "CMServer" }
                     convert => { "cputimeinmillisec" => "float" }
                }

and my output is:

output {
         elasticsearch  { 
              hosts => ["localhost:9200"]
              index => "logstash%{[@metadata][indexname]}%{+YYYY.MM.dd}"
         }
         stdout { codec => rubydebug }
}

Output is generated to stdout, but nothing to elasticsearch.

If I set the index as below, I can see the output in elasticsearch :

index => "logstash%{[@metadata][beat]}%{+YYYY.MM.dd}"

Any Idea?

*I am running Version 6 Beta on Windows platform.

Thanks
Sharon.

Elasticsearch index names can't contain uppercase characters. There should be Logstash log entries about this.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.