You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
for more information about the environment variables.</p></div><divclass="section"><divclass="titlepage"><div><div><h4class="title"><aid="index-option-es"></a><codeclass="literal">index</code><ahref="https://github.com/elastic/beats/edit/6.x/libbeat/docs/outputconfig.asciidoc" class="edit_me" title="Edit this page on GitHub" rel="nofollow">edit</a></h4></div></div></div><p>The index name to write events to. The default is
755
755
<codeclass="literal">"auditbeat-%{[beat.version]}-%{+yyyy.MM.dd}"</code> (for example,
756
-
<codeclass="literal">"auditbeat-6.7.0-2019-02-03"</code>). If you change this setting, you also
756
+
<codeclass="literal">"auditbeat-6.7.0-2019-02-04"</code>). If you change this setting, you also
757
757
need to configure the <codeclass="literal">setup.template.name</code> and <codeclass="literal">setup.template.pattern</code> options
758
758
(see <aclass="xref" href="configuration-template.html" title="Load the Elasticsearch index template"><em>Load the Elasticsearch index template</em></a>).
We recommend including <codeclass="literal">beat.version</code> in the name to avoid mapping issues
767
767
when you upgrade.
768
768
</p></td></tr></table></div><p>With this configuration, all events with <codeclass="literal">log_type: normal</code> are sent to an
769
-
index named <codeclass="literal">normal-6.7.0-2019-02-03</code>, and all events with
769
+
index named <codeclass="literal">normal-6.7.0-2019-02-04</code>, and all events with
770
770
<codeclass="literal">log_type: critical</code> are sent to an index named
771
-
<codeclass="literal">critical-6.7.0-2019-02-03</code>.</p><divclass="tip admon"><divclass="icon"><imgalt="Tip" src="images/icons/tip.png" /></div><divclass="admon_content"><p>To learn how to add custom fields to events, see the
771
+
<codeclass="literal">critical-6.7.0-2019-02-04</code>.</p><divclass="tip admon"><divclass="icon"><imgalt="Tip" src="images/icons/tip.png" /></div><divclass="admon_content"><p>To learn how to add custom fields to events, see the
772
772
<aclass="link" href="configuration-general-options.html#libbeat-configuration-fields" title="fieldsedit"><codeclass="literal">fields</code></a> option.</p></div></div><p>See the <aclass="link" href="elasticsearch-output.html#indices-option-es" title="indices"><codeclass="literal">indices</code></a> setting for other ways to set the index
773
773
dynamically.</p></div><divclass="section"><divclass="titlepage"><div><div><h4class="title"><aid="indices-option-es"></a><codeclass="literal">indices</code><ahref="https://github.com/elastic/beats/edit/6.x/libbeat/docs/outputconfig.asciidoc" class="edit_me" title="Edit this page on GitHub" rel="nofollow">edit</a></h4></div></div></div><p>An array of index selector rules. Each rule specifies the index to use for
774
774
events that match the rule. During publishing, Auditbeat uses the first
message: "ERR"</pre></div><p>This configuration results in indices named <codeclass="literal">warning-6.7.0-2019-02-03</code>
808
-
and <codeclass="literal">error-6.7.0-2019-02-03</code> (plus the default index if no matches are
807
+
message: "ERR"</pre></div><p>This configuration results in indices named <codeclass="literal">warning-6.7.0-2019-02-04</code>
808
+
and <codeclass="literal">error-6.7.0-2019-02-04</code> (plus the default index if no matches are
809
809
found).</p><p>The following example sets the index by taking the name returned by the <codeclass="literal">index</code>
810
810
format string and mapping it to a new name that’s used for the index:</p><divclass="pre_wrapper"><preclass="programlisting prettyprint lang-yaml">output.elasticsearch:
setup.template.settings.index.lifecycle.name: "beats-default-policy"</pre></div><divclass="important admon"><divclass="icon"><imgalt="Important" src="images/icons/important.png" /></div><divclass="admon_content"><p>If you set the options manually as shown in this example, do <spanclass="strong strong"><strong>not</strong></span>
764
764
set <codeclass="literal">ilm.enabled</code>, or the settings specified in the configuration file will be
765
765
overwritten.</p></div></div><p>This configuration results in a managed index named something like
766
-
<codeclass="literal">customname-2019-02-03-000001</code> and the following index settings:</p><divclass="pre_wrapper"><preclass="programlisting prettyprint lang-shell">"aliases" : {
766
+
<codeclass="literal">customname-2019-02-04-000001</code> and the following index settings:</p><divclass="pre_wrapper"><preclass="programlisting prettyprint lang-shell">"aliases" : {
for more information about the environment variables.</p></div><divclass="section"><divclass="titlepage"><div><div><h4class="title"><aid="index-option-es"></a><codeclass="literal">index</code><ahref="https://github.com/elastic/beats/edit/6.x/libbeat/docs/outputconfig.asciidoc" class="edit_me" title="Edit this page on GitHub" rel="nofollow">edit</a></h4></div></div></div><p>The index name to write events to. The default is
755
755
<codeclass="literal">"filebeat-%{[beat.version]}-%{+yyyy.MM.dd}"</code> (for example,
756
-
<codeclass="literal">"filebeat-6.7.0-2019-02-03"</code>). If you change this setting, you also
756
+
<codeclass="literal">"filebeat-6.7.0-2019-02-04"</code>). If you change this setting, you also
757
757
need to configure the <codeclass="literal">setup.template.name</code> and <codeclass="literal">setup.template.pattern</code> options
758
758
(see <aclass="xref" href="configuration-template.html" title="Load the Elasticsearch index template"><em>Load the Elasticsearch index template</em></a>).
We recommend including <codeclass="literal">beat.version</code> in the name to avoid mapping issues
767
767
when you upgrade.
768
768
</p></td></tr></table></div><p>With this configuration, all events with <codeclass="literal">log_type: normal</code> are sent to an
769
-
index named <codeclass="literal">normal-6.7.0-2019-02-03</code>, and all events with
769
+
index named <codeclass="literal">normal-6.7.0-2019-02-04</code>, and all events with
770
770
<codeclass="literal">log_type: critical</code> are sent to an index named
771
-
<codeclass="literal">critical-6.7.0-2019-02-03</code>.</p><divclass="tip admon"><divclass="icon"><imgalt="Tip" src="images/icons/tip.png" /></div><divclass="admon_content"><p>To learn how to add custom fields to events, see the
771
+
<codeclass="literal">critical-6.7.0-2019-02-04</code>.</p><divclass="tip admon"><divclass="icon"><imgalt="Tip" src="images/icons/tip.png" /></div><divclass="admon_content"><p>To learn how to add custom fields to events, see the
772
772
<aclass="link" href="configuration-general-options.html#libbeat-configuration-fields" title="fieldsedit"><codeclass="literal">fields</code></a> option.</p></div></div><p>See the <aclass="link" href="elasticsearch-output.html#indices-option-es" title="indices"><codeclass="literal">indices</code></a> setting for other ways to set the index
773
773
dynamically.</p></div><divclass="section"><divclass="titlepage"><div><div><h4class="title"><aid="indices-option-es"></a><codeclass="literal">indices</code><ahref="https://github.com/elastic/beats/edit/6.x/libbeat/docs/outputconfig.asciidoc" class="edit_me" title="Edit this page on GitHub" rel="nofollow">edit</a></h4></div></div></div><p>An array of index selector rules. Each rule specifies the index to use for
774
774
events that match the rule. During publishing, Filebeat uses the first
message: "ERR"</pre></div><p>This configuration results in indices named <codeclass="literal">warning-6.7.0-2019-02-03</code>
808
-
and <codeclass="literal">error-6.7.0-2019-02-03</code> (plus the default index if no matches are
807
+
message: "ERR"</pre></div><p>This configuration results in indices named <codeclass="literal">warning-6.7.0-2019-02-04</code>
808
+
and <codeclass="literal">error-6.7.0-2019-02-04</code> (plus the default index if no matches are
809
809
found).</p><p>The following example sets the index by taking the name returned by the <codeclass="literal">index</code>
810
810
format string and mapping it to a new name that’s used for the index:</p><divclass="pre_wrapper"><preclass="programlisting prettyprint lang-yaml">output.elasticsearch:
0 commit comments