We create a new index the 1st of every month. Index example logstash-xx-xx-xx-%{+YYYY.MM}
I have been told the first log format it recieves sets the format for that index and all logs that dont match are dropped.
Is this true
We create a new index the 1st of every month. Index example logstash-xx-xx-xx-%{+YYYY.MM}
I have been told the first log format it recieves sets the format for that index and all logs that dont match are dropped.
Is this true
Yes it is.
Is there a way round this. At the moment i create a new index
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
© 2020. All Rights Reserved - Elasticsearch
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.