Index template not working from Filebeat to ES

Hi, team:
I´ve found an issue in my config about the creation of index. In logs I can see this error:

But I have got configured this in filebeat.yml:

Now I´ve updated to 7.4 the ELK but in 6.8 version the index was working fine. It`s like the configuration is not readed...

Something to help me please. I´ve tried everything.

In add I have the configuration in:
/etc/filebeat/conf.d

Something like:

  • type: log
    paths:

    • /opt/cdr/vem/cdr-csv/Master.csv
      tail_files: true
      fields:
      cdr: freeswitch-master
      node: prod-freeswitch-01

    json.keys_under_root: true
    json.add_error_key: true

I´m working with 2 yml inside conf.d because I´ve taken 2 different logs:
type: log
paths:

  • /opt/cdr/vem/cdr-csv/Master.csv
    tail_files: true
    fields:
    cdr: freeswitch-master
    node: prod-freeswitch-01

json.keys_under_root: true
json.add_error_key: true

and

  • type: log
    enable: true
    paths:

    • /opt/cdr/vem/vem_events_cdr_*.cdr
      tail_files: true
      fields:
      cdr: freeswitch-vem-events
      node: prod-freeswitch-01

    fields_under_root: true
    json.keys_under_root: true
    json.add_error_key: true

Both are JSON format. For this I´ve sent directly to ES.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.