Set index in filebeat

Elastic Stack Beats
1

Hi,

I am trying to configure Index name at filebeat end, but it's not working and even no error in logs

Configuration:-
output.elasticsearch:
hosts: ["IP:9200"]
username: "elastic"
password: "changeme"
output.elasticsearch.index: "ucc_app-%{+yyyy.MM.dd}"
setup.template.enabled: false
setup.template.name: 'ucc_app'
setup.template.pattern: "ucc_app*"

I can see Index name in Kibana with "filebeat-7.3.2-2020.01.31-000001" pattern.
please suggest how can I configure required Index name?

2

Hi!

Is seems that it uses the custom index name. Could you remove the template settings and try with a bare minimum configuration like:

output.elasticsearch:
  hosts: ["https://localhost:9200"]
  index: "filebeat-%{[agent.version]}-%{+yyyy.MM.dd}"

setup.template.enabled: false disables the template loading for sure.

index setting docs
template docs

C.

3

Thanks for reply!!!!!

I have tried without template but result is same.

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.