Hi dear community.I am having problems with the index naming of logs that belongs to the one day but indexed as previous.Now the logs are like following:
Log:
09-09-2019 00:00:08 - log.....
Logstash output:
output {
elasticsearch {
hosts => localhost
manage_template => false
index => "%{[@metadata][beat]}-%{[@metadata][version]}-%{+YYYY.MM.dd}"
}
}
Now if the log timestamp is something like "09-09-2019 10:00:08 - log...." then it is going to be indexed as "filebeat-7.3.1-2019.09.09" but if log datetime is something like "09-09-2019 00:00:08 ...log" or "09-09-2019 02:00:08 ...log" and so then it is going to be indexed like "filebeat-7.3.1-2019.09.08".