From 984ba958fb92bfd4efac280aa7b23b353930b60b Mon Sep 17 00:00:00 2001 From: t3chn0m4g3 Date: Sat, 1 Feb 2020 14:08:23 +0000 Subject: [PATCH] logstash template not upgraded with daily index enabled logstash will not be able to put new events into ES simple solution, just deleting logstash template upon logstash start and leave it to logstash to upload the latest template . --- docker/elk/logstash/dist/update.sh | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/docker/elk/logstash/dist/update.sh b/docker/elk/logstash/dist/update.sh index 9619ac93..55281998 100644 --- a/docker/elk/logstash/dist/update.sh +++ b/docker/elk/logstash/dist/update.sh @@ -34,3 +34,11 @@ if [ "$myCHECK" == "0" ]; else echo "Cannot reach Github, starting Logstash without latest translation maps." fi + +# Make sure logstash can put latest logstash template by deleting the old one first +echo "Removing logstash template." +curl -XDELETE http://elasticsearch:9200/_template/logstash +echo +echo "Checking if empty." +curl -XGET http://elasticsearch:9200/_template/logstash +echo