The problem is it does not create template , the template just for change things in the settings.
this is the template :
{
"index_patterns": ["audittrail_transactions_*"],
"settings": {
"number_of_shards": 2,
"index": {
"max_result_window": 50000000,
"mapping": {
"total_fields": {
"limit": 100000
}
}
}
}
}
and this is the config file :
output {
elasticsearch {
hosts => ["localhost:9200"]
index => "audittrail_transactions_app-logs"
ssl => false
ssl_certificate_verification => false
document_id => "%{id}"
template => "/C:/Users/s.nuseirat/Desktop/template.json"
template_name => "audittrail_transactions_"
manage_template => true
}
}`