Hi,
I upgraded from 6.8 to 7.1 yesterday and it works well, except that I do not write to the default index "logstash-%{+YYYY.MM.dd}" anymore, instead everything goes into an index just called logstash with no date attached.
After changing the output to "logstash2-%{+YYYY.MM.dd}" it works again as intended, the logs get written to logstash2-2019.05.23.
I would like for it to be written to just logstash-timestamp again, but for some reason I cannot figure out how, the output just does not seem to work.
This works:
output {
elasticsearch {
hosts => ["localhost:9200"]
index => "logstash2-%{+YYYY.MM.dd}"
}
This does not:
output {
elasticsearch {
hosts => ["localhost:9200"]
index => "logstash-%{+YYYY.MM.dd}"
}