Steps to Reproduce:
I want collect mysql slow log into elasticsearch and start tow logstash . they have the same configuration , but when I restart a logstash it seems create a default template names logstash-* and other one fist start and no create a default template.
I find the parameter manage_template , it will control the logstash whether or not create default template logstash-* . so I want know it will always create a default template logstash-* when the parameter manage_template set true or not config in configfile(it seems default value is true) ? but I hava start multiple logstash and not config the manage_template , why they hava not created default template logstash-*
So I want to know which parameter about the generate of default template logstash-* . maybe the manage_tempate or template_overwriter or index_name ,env if the template director ?
I want collect mysql slow log into elasticsearch and start tow logstash . they have the same configuration , but when I restart a logstash it seems create a default template names logstash-* and other one fist start and no create a default template.
Sorry , I have not say message clear. We have some template named logstash-nginx-* and logstash-qba-, when I start a new logstash, the all templates is OK . But when I restart the old logstash, it will create a default template logstash- , the log will send to the logstash-* and nothing send to logstash-qba-. but it only the logstash-qba- have no info and the other template like logstash-nginx-* it work OK .
I'm sorry, I can describe is not very clear.Specific logstash startup configuration file above the information I have given out.
Specific operation:
I put the old logstash binary package and configuration file copy to a new server, and then create a new logstash.And then restart the old logstash.
The result of:
Because we have to create some templates online, similar to the logstash - qba - *, logsatsh - nginx - *, logstash - remix - * so named template, but after the resumption of the old logstash process has generated a default template logstash - *.Then we had some application log is sent to the above the logstash - qba - * this template, the results of these all the data sent to logstash - * this template, cause logstash qba - * this template, there is no data to send.But when I create new logstash didn't happen this kind of situation, and only logstash qba - * the template.
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.