Wrong indices, every second

(sander van der Laan) #1


When i start winlogbeat and use logstash or direct output to my elk every second an indices is created with wrong timestamps and the server crashes.

I think something is wrong with the date notation but i cannot find it.

Every second am indice is generated and it counts the days as seconds.

(Andrew Kroh) #2

Sounds like it could be an issue with your LS config. Please post the config you are using for both LS and Winlogbeat.

(sander van der Laan) #3

I found it, it was processing the whole event log, when i set the config to 1 day everything is ok.

(system) closed #4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.