New Custom Logs (Filestream) integration does not create a dataset specific index template

Hello Everyone,

due to deprecation of old Custom Logs integration I'm now configuring the new Custom Logs (Filestream) integration, and I'm wondering why this integration does not create a managed dataset specific index template like other custom integrations do.
The new Data Stream was automatically configured to use the generic logs template, but I don't want to extend it with dataset specific index mappings.

Is the any way to make Fleet create managed index template for this integration?

My stack version is 9.0.1

Thanks.

Regards,
Alexander

Hi @allatrue

I think the pattern is now...

Clone the logs template and update it to your needs...
I think we stopped auto creating templates... as often they added little to no value, so now it is "by intention"

To match your integration

1 Like

Dear @stephenb,

thanks for a quick response. Sounds like a valid point. For me it was important to know if it's a new pattern or something specific for this integration.

The auto creation of templates is more user friendly and was very helpful for me in the learning phase, as I could implement my solution without knowing much about links between data stream, index template and component templates.
A how-to-guide for using custom integration agents would be helpful for elastic newbies, I think.

Regards,
Alexander