Ww is returning a week in the future - why?


I am experiencing a weird thing. I am using the following pattern on the output of logstash:

index => "{{logowner}}-%{application}-%{+xxxx.ww}”

However, I am getting errors saying that the index doesn't exist, and when I see the error logs on Kibana, I see that the index where the data is being attempted to be saved is like this:


What could be causing this?

For what date are you getting 2018.51?

I found out what the problem was. The log was from a macOS machine and didn't have year information, so logstash interpreted it as of being of this year. So Oct 23rd (2017) became Oct 23rd 2018.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.