Your log shows:
[2018-10-22T19:01:52,136][ERROR][logstash.outputs.elasticsearch] Failed to install template. {:message=>"Got response code '400' contacting Elasticsearch at URL 'http://localhost:9200/_template/datamobi'"
It gets a 400 error code.
- What do you get in the ES logs?
- What do you get when you call
GET /_template? - Why do you specify inside
output->elasticsearch ->indexthe index namedatamobi_in_%{index_day}, but you create a template for the indextemplate_test? - Why do you have an array inside
output->elasticsearch->template_name? It should be a string according to documentation: doc