I am using elasticsearch and filebeat v7.14 in ubuntu-20.04 machine. I am trying to read apache logs and publish it to elasticsearch. My configuration is like below;
filebeat.modules:
- module: apache
access:
enabled: true
var.paths:
- /data/serverlogs/access.log
error:
enabled: true
var.paths:
- /data/serverlogs/error.log
output.elasticsearch:
enabled: true
hosts: ["http://192.168.0.2:9200"]
username: "elastic"
password: "password"
index: "filebeat-apache-%{+yyyy.MM.dd}"
setup.template.overwrite: true
setup.template.name: "filebeat-apache"
setup.template.pattern: "filebeat-apache-*"
setup.template.enabled: true
seccomp:
default_action: allow
syscalls:
- action: allow
names:
- rseq
I want my index named like filebeat-apache-2024.05.31
. But it is like filebeat-7.14.2-2024.05.31-000001
all the time. Why is this happening and how to fix this?
Thank you.