Hello, I've a strange problem with winlogbeat. I've installed winlogbeat 1.3 on servers and receive directly on elastic port 9200 corrupted log that create indexes starting from December 2015 through now! Event if I delete all winlogbeat indexes, they recreate automatically! I've only one elasticse…

Daily indexes are automatically created based on the event @timestamp. Winlogbeat uses the event log record's TimeCreated field as the @timestamp in its events [1]. If you wish to have Winlogbeat only report events that were created within the last N hours/minutes/seconds then you can use the ignore…

Discuss the Elastic Stack

Winlogbeat creates indexes based on dates from the past

Elastic Stack Beats

gmourani October 7, 2016, 3:38pm 5

Thanks Andrew,

It works now.

Topic		Replies	Views
Winlogbeat - seems always start from oldest eventlog entry Beats winlogbeat	3	1362	April 15, 2016
Limiting Initial Scope of Winlogbeat Beats	3	1327	July 15, 2016
Where do these OLD Indexes come from? Beats	8	577	March 27, 2017
WinlogBeat to Logstash integration Logstash	4	290	August 20, 2019
Winlogbeat default age to ingest Beats winlogbeat	5	551	November 5, 2018

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Winlogbeat creates indexes based on dates from the past

Related topics