Load index template for beats upgrade

Elastic Stack Beats
,
1

I need to upgrade filebeat 6.8 to 7.16 and winlogbeat 6.3 to 7.16. After reading the upgrade guide, my understanding is that I need to upgrade winlogbeat to 6.8 first, then load index template.

However our beats output to logstash, not elaticsearch. Do we still load index template? How can I do that when we don't have a running Elasticsearch cluster?

Thank you.

2

The templates are for Elasticsearch so if ur not using Elasticsearch you don't need to worry about it.

3

Similarly, since you are not using ES you can skip upgrading to 6.8 and go direct to 7.16. If you have an Logstash pipelines you might need to adjust some of your processing to account for new field names.

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.