Problem sending data to Elastic Data Stream
I’ve configured an index template in Elastic for a specific log source and set it to use a data stream instead of the indices.
Whenever Cribl starts sending data, the data stream is created, but no data is added to is. I presume this has something to do with the _bulk API, since data streams only support the op_type create.
Does anyone have a working configuration for logging towards data streams in Elastic?