Need help with importing Winlogbeat index template when using ILM and Logstash

Elastic Stack Beats
1

How do I manually import the Winlogbeat index template when using ILM and Logstash with the following settings? I have tried every possible setting I can think of in my temporary winlogbeat.yml but can't get it to work.

ILM Policy Name: winlogbeat_policy
ILM Rollover Alias Name: winlogbeat-alias
Index Pattern: winlogbeat-*
Winlogbeat initial index: winlogbeat-000001

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.