Unable to specify index

(Erik Stephens) #1

The timestamp used for the index is always the current time instead of the @timestamp I parse from the event. I've tried various workarounds such as trying to remove/redefine [@metadata][index] but can't get filebeat or beats input to play nice. I wasn't seeing this behavior from logstash-forwarder. Does this sound like user error on my part or are others experiencing the same behavior?

(Erik Stephens) #2

I filed this issue:

(system) #3