Wrong indices, every second

(sander van der Laan) #1


When i start winlogbeat and use logstash or direct output to my elk every second an indices is created with wrong timestamps and the server crashes.

I think something is wrong with the date notation but i cannot find it.

Every second am indice is generated and it counts the days as seconds.

(Andrew Kroh) #2

Sounds like it could be an issue with your LS config. Please post the config you are using for both LS and Winlogbeat.