I upgrade elastic-stack from 5.6.8 to 6.6.2,there is no new messages into elasticsearch indices . When I just rollback logstash to 5.6.8 use the same configuration file than elk is work
I try to delete index template
DELETE /_template/logstash
but not work
logstash.conf:
input {
kafka {
bootstrap_servers => "node1:9092,node2:9092"
auto_commit_interval_ms => "1000"
max_poll_records => "100"
session_timeout_ms => "30000"
request_timeout_ms => "40000"
group_id => "logstash-662-2"
topics => ["webv2_pre_iis"]
decorate_events => true
consumer_threads => 5
codec => "json"
}
}
output {
if[kafka][topic] == "webv2_pre_iis" {
elasticsearch {
hosts => ["http://node1:9200","http://node2:9200","http://node3:9200"]
index => "webv2-pre-iis-%{+YYYYMMdd}"
}
}
}