Logstash daily indexing?

Elastic Stack Logstash
1

Hi,

I am planning on using Filebeat for log rotation on a server. From my understanding, Filebeat tails the inode so log rotation shouldn't be an issue when it comes to reading new log data. However, I have a question regarding how information is indexed. If I would like a new index everyday in elasticsearch, how would I configure that information in Logstash? Would I have to specify a date within the index name?

2

The default value for the index option on an elasticsearch output is to create daily indexes.

3

Okay, so if I do not specify an index in logstash, it will automatically be configured to a daily index name?

4

Yes.

5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.