A
A
Andrey2020-11-20 15:35:17
elasticsearch
Andrey, 2020-11-20 15:35:17

Data not being sent to elasticsearch?

Hello guys.
I must say right away that I just started to understand this stack .... naturally, I ask this
question - I set up winlogbeats and it sent logs to logstash, but then I deleted indexes (winlogbeat-*) from "Index Management" that came from windows machines, and more and more they do not appear there, how to return everything back? I'm attaching a screenshot to make it clear where I deleted it.

5fb7b7ca48226389249178.jpeg

Answer the question

In order to leave comments, you need to log in

1 answer(s)
S
SlavikF, 2020-11-21
@SlavikF

I don't know why logstash is needed? winlogbeat can immediately send data to Elastic directly. And in this case, at startup, winlogbeat checks and, if necessary, creates both the pipeline and indexes.
But if through logstash - then who knows what and who creates it there ...

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question