1

I am trying to push kafka data to Elasticsearch, I am trying to mention my elasticsearch index name as:

"name-date" -- logdata-2017.01.18

input {
  kafka {
    bootstrap_servers => "XXX.XX.XXX.XX:9092"
    topics => ["c-data"]
  }
}
output {
  elasticsearch {
    hosts => ["XXX.XXX.XX.XXX:9200"]
    index => "logdata-%{+yyyy.MM.dd}"
  }
}

But index is not getting created.

If I give any other index name without date format- for example index => "metricbeat" it works but if I give with the configuration mentioned above it doesnt seem to work.

Can anyone help?

1 Answer 1

2

What if you have your index name as follows:

index => "logdata-%{+YYYY.MM.dd}" <-- change the yyyy into uppercase
Sign up to request clarification or add additional context in comments.

2 Comments

You sure that the index is not being created, due to the change you made in the index property?
Yes, right. If I give some other index name other than the date format, it is displaying in localhost:9200/_cat/indices

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Start asking to get answers

Find the answer to your question by asking.

Ask question

Explore related questions

See similar questions with these tags.