Logstash not creating multiple index

Elastic Stack Logstash
1

i have this code use in conf file of logstash

input {
beats{
port => 5044
}
}
filter {
grok{
match => { "message" => "%{INT:Event_Date} %{MONTH:Event_Month} %{YEAR:Event_Year} | %{TIME:SFS_Event_Time},%{INT:LOG_NUMB} | %{LOGLEVEL:log-level} | %{DATA:Pool_Thread} | %{DATA:Extension} | | {lib}: { Zone: %{DATA:Zone} } ELK_SYNC_LOG Count: %{INT:Count} UserCount: %{INT:User-Count}" }
}
mutate{
convert => { "User-Count" => "integer" }
}
}

output {
elasticsearch {
hosts => ["http://localhost:1311"]
index => "logstash-%{+yyyy.MM.dd}"

My kibana shows only one index logstash* the index is not been created on daily basis due to this my data for logs stored in single file need only last 45 days data i want to delete rest

2

Set ilm_enabled to false.

3

can you please tell what will it do as i commented this line already in my conf file

4

I gave you a link to the documentation so that you can read about Index Lifecycle Management.

5

Thanks it would be helpful

6

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.