Hi Team, I am trying to deploy function beat to read AWS logs which i am succesfully able to do.
However, i require different index to be created in Elasticsearch for different log groups.Below id the elasticsearch output condition i used, which isnt working.
output.elasticsearch:
# Array of hosts to connect to.
hosts: ["10.10.10.10:9200"]
indices:
- index: "xyz"
when.contains:
log_group: "ec2"
I also tried providing the full log groups name under the log_group.
Elastic search version : 7.7.1
Functionbeat version : 7.9.0
Please help me to understand and resolve the issue.
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.