Hello, I've upgraded without too much hassle from ELK 5.5 across 6.8 to 7.3. Arriving at 7.3 I notice that the index in ES that LS seems to use is "logstash". Why? Why won't it continue writing to the existing logstash- (in this case logstash-2019.09.02) AFAICS the default "index" directive of LS…

Logstash logs to "logstash" index instead of "logstash-<date>" after update

holobolo0815 September 2, 2019, 4:48pm 2

Yeah ok, Logstash 7.0 breaking changes:

Elasticsearch Index lifecycle management (ILM) is auto-detected and enabled by default if your Elasticsearch cluster supports it.

RTFM, I guess.

Topic		Replies	Views
Logstash Elasticsearch Output into wrong index Logstash	1	356	June 20, 2019
Logstash 7 is not adding datestamp to index name Logstash	4	624	November 22, 2019
Logstash does not create logstash-* indices in ES Logstash	1	349	October 7, 2019
Output logs with date of indexing Logstash Logstash	1	560	January 11, 2017
Logstash does not use the correct index with Elasticsearch output Logstash	7	1695	January 25, 2022