Ww is returning a week in the future - why?

Elastic Stack Logstash
1

Hi!

I am experiencing a weird thing. I am using the following pattern on the output of logstash:

index => "{{logowner}}-%{application}-%{+xxxx.ww}”

However, I am getting errors saying that the index doesn't exist, and when I see the error logs on Kibana, I see that the index where the data is being attempted to be saved is like this:

logowner-application-2018.51

What could be causing this?

2

For what date are you getting 2018.51?

3

I found out what the problem was. The log was from a macOS machine and didn't have year information, so logstash interpreted it as of being of this year. So Oct 23rd (2017) became Oct 23rd 2018.

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.