Closed dbaumgarten closed 4 years ago
I found the problem. If logstash_format is false and include_timestamp is false (the default) no timestamps are included in the log-data and the logs therefore do not show up in Kibana. Once setting include_timestamp to true everything works fine.
(check apply)
Problem
Hello there,
I am using fluentd to ship logs from Kubernetes to elasticsearch. I am using this docker image to do this.
I want fluentd to write the logs into an index that has already been created by the administrators of the elasticseach server.
I have set index_name to the wanted index and set logstash_format to false (because according to the docs, otherwise index_name would be ignored).
But for some reason fluentd behaves as if logstash_format is set to true. It writes the logs to an index called logstash-\<date>.
I am really confused, why does fluentd (or the elasticsearch plugin) ignore the logstash_format=false setting?
Provide example config and message
Expected Behavior
Logs are written to the index called "caas-gks-dev"
Fluentd config (as printed at startup)
...
Using Fluentd and ES plugin versions