I would like to know if multiple tags can be added with Postgresql module. In my environment there are two postgresql containers and it shoud have different Elasticsearch indexes. Below is the current setting of filebeat module and it does not work.
- module: postgresql log: enabled: true var.paths: ["/var/log/postgresql1/*.log", "/var/log/postgresql2/*.log"] - add_tags: tags: ["postgres1", "postgres2"]
What I would like to do is that it can create distinctive elasticsearch index based on tag by using filter in Logstash. If multiple tags are not available, I'm thinking of running one more filebeat container and set different tag. But ideally one filebeat container should handle all postgresql logs to save docker machine resource.