0
votes

According to this

https://www.elastic.co/guide/en/elasticsearch/reference/current/indices-templates.html

we could create index like that

curl -XPUT 'http://@IPELK:9200/_template/filebeat?pretty' -d@/PATH2/filebeat.template.json

When i launch that commande I receive as output : { "acknowledged" : true }

But still no having index created in Elastic search as we can see :

[root] curl 'localhost:9200/_cat/indices?v'
health status index               pri rep docs.count docs.deleted store.size pri.store.size
yellow open   .kibana               1   1          3            1     15.1kb         15.1kb
yellow open   logstash-2016.01.12   5   1        115            0    142.4kb        142.4kb
[root]#

So, actually i have no communication between filebeat and my logstash :( Any idea ? Thx.

1
Can you show the content of filebeat.template.json and your logstash configuration?Val

1 Answers

1
votes

By removing _template like this

curl -XPUT 'http://localhost:9200/filebeat?pretty' -d@/path_2/filebeat.template.json