Hello. Im trying to name a index based on a field but it doesnt seem to work:
output
{
elasticsearch {
hosts => ["localhost"]
user => ["elastic"]
password => ["pass"]
index => "winlogbeat-server-winapplication-%{[event][provider]}-%{+yyyy.MM.dd}"
}
}
As you see, Im trying even a generic one and it does not produce the index.
How can I do this?