I am using the File Output functionality of Metricbeat and Winlogbeat 5.5.1, and I'd like the ability to add beat data to the output filename. Specifically the date component of the @timestamp field. Does the Beat file output filename field support beat data retrieval? If so, what is the syntax?
I've attempted syntax such as:
Quick back story- I'm attempting to create a monitoring solution of my Production environment, with the constraint that my ES instance is in a different domain, with no direct connectivity (gotta love corporate IT...). The only connectivity between those environments is a network share acting as a dropbox. Due to this, I have file output configured on my beats in Prod, and I'd like to make those outputted filenames unique so they aren't overwriting each other when I moved them from Prod into my ES environment.