Output file plugin not creating timestamped file

Elastic Stack Logstash
1 
output {
  file{
    path => "/var/log/kube-audit/audit-%{+YYYY.MM.dd.HH}.log"
    create_if_deleted => true
    id => "file"
}

The file looks ends up being /var/log/kube-audit/audit-.log. The timestamp works fine in the elasticsearch output plugin so I'm not sure why this is broken.

2

In 7.1.1 that works as expected, provided, of course, that the events have an @timestamp field (that's what it uses to do the sprintf).

3

Thanks!

I noticed that the @timestamp field was removed from a bad example on the kubernetes docs.