I am running Logstash and a three-node Elasticsearch cluster in docker containers. In the Elasticsearch output plugin of Logstash, I'm attempting to use a custom index template with the following lines in logstash.conf: manage_template => true template_name => "my-logs" template => "/usr/share/logs…

Oh, I know why... Logstash doesn't yet support the new index templates , but only the legacy index templates . If you change your template to the following one, it will work: { "index_patterns" : ["my-logs*"], "order" : 1, "settings" : { "number_of_shards" : 1, "number_of_replicas" : 1…

Logstash -> Elasticsearch index template

Elastic Stack Elasticsearch

kelk (kin) July 31, 2020, 6:15pm 9

Out of curiosity, what's the advantage of the new template compared to the old one?

Topic		Replies	Views
Failed to install template Logstash	2	629	September 22, 2022
Logstash.outputs.elasticsearch : Failed to install template Logstash	3	14378	November 20, 2018
Failed to install template {:message=>"Got response code '400' contacting Elasticsearch at URL Elasticsearch	1	742	September 22, 2022
/_template OR /_index_template? Logstash docker , ilm-index-lifecycle-management	5	511	April 7, 2021
Error while installing index templates Logstash	1	251	August 4, 2022

Logstash -> Elasticsearch index template

Related topics