Logstash not creating multiple index

i have this code use in conf file of logstash

input {
port => 5044
filter {
match => { "message" => "%{INT:Event_Date} %{MONTH:Event_Month} %{YEAR:Event_Year} | %{TIME:SFS_Event_Time},%{INT:LOG_NUMB} | %{LOGLEVEL:log-level} | %{DATA:Pool_Thread} | %{DATA:Extension} | | {lib}: { Zone: %{DATA:Zone} } ELK_SYNC_LOG Count: %{INT:Count} UserCount: %{INT:User-Count}" }
convert => { "User-Count" => "integer" }

output {
elasticsearch {
hosts => ["http://localhost:1311"]
index => "logstash-%{+yyyy.MM.dd}"

My kibana shows only one index logstash* the index is not been created on daily basis due to this my data for logs stored in single file need only last 45 days data i want to delete rest

Set ilm_enabled to false.

can you please tell what will it do as i commented this line already in my conf file

I gave you a link to the documentation so that you can read about Index Lifecycle Management.

Thanks it would be helpful

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.