We create a new index the 1st of every month. Index example logstash-xx-xx-xx-%{+YYYY.MM}
I have been told the first log format it recieves sets the format for that index and all logs that dont match are dropped.
Is this true
We create a new index the 1st of every month. Index example logstash-xx-xx-xx-%{+YYYY.MM}
I have been told the first log format it recieves sets the format for that index and all logs that dont match are dropped.
Is this true
Yes it is.
Is there a way round this. At the moment i create a new index
© 2020. All Rights Reserved - Elasticsearch
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.