Custom Logs integration on Fleet: Select custom index

Elastic Stack Elasticsearch
,
1

Hello, we are trying to setup a Custom Log integration in order to grab some logs from our servers.

The logs are correctly captured, however there is no way to specify a custom index, Fleet creates its own data stream with concatenation of the namespace + the dataset name.

Is there a way to specify a custom index + ilm policy like filebeat does?

2

Hi @alessio.dalbianco As you mentioned, Fleet will force you to use the data stream naming scheme. Inside the scheme, you can have your own dataset and namespace, but you can't just create any custom index.

Can you share a bit more background on why you need a fully customised data stream/index? With the current data stream naming scheme you are still able to use your own ILM policy per data stream if needed or add custom mappings.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.