Hi Team, I am trying to deploy function beat to read AWS logs which i am succesfully able to do.
However, i require different index to be created in Elasticsearch for different log groups.Below id the elasticsearch output condition i used, which isnt working.
output.elasticsearch: # Array of hosts to connect to. hosts: ["10.10.10.10:9200"] indices: - index: "xyz" when.contains: log_group: "ec2"
I also tried providing the full log groups name under the log_group.
Elastic search version : 7.7.1
Functionbeat version : 7.9.0
Please help me to understand and resolve the issue.