all software version is 6.2.0
the index logtash-webnginx-2018.03.05 create success ,but today index not automatic create ,this is why?
Is there anything in the Elasticsearch logs?
[2018-03-06T10:01:49,960][WARN ][logstash.outputs.elasticsearch] Could not index event to Elasticsearch. {:status=>404, :action=>["index", {:_id=>nil, :_index=>"logstash-webnginx-2018.03.06", :_type=>"doc", :_routing=>nil}, #LogStash::Event:0x1f5ffbd7], :response=>{"index"=>{"_index"=>"logstash-webnginx-2018.03.06", "_type"=>"doc", "_id"=>nil, "status"=>404, "error"=>{"type"=>"index_not_found_exception", "reason"=>"no such index and [action.auto_create_index] ([.security,.monitoring*,.watches,.triggered_watches,.watcher-history*]) doesn't match", "index_uuid"=>"na", "index"=>"logstash-webnginx-2018.03.06"}}}}
i have already in elasticsearch.yml add content "action.auto_create_index: .security,.monitoring*,.watches,.triggered_watches,.watcher-history*"
That means that only the indices listed can get created automatically, and as a pattern matching the index you are trying to write to (logstash-webnginx-2018.03.06
) is not included in that list, Elasticsearch can not create the index.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.