Hi, Havn't been using ELK too long and I just can't undestand, why always logstash creates new index with the default name "logstash-xxxx.xx.xx" and ignores totally my config. I have tried to tell: index => "api-%{+YYYY.MM.dd}" ... or just "api" or anything, but it always creates the index with…

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Newbie needs help: Logstash always creates index with a default name "logstash-xxxx.xx.xx"