"Design" considerations about indices from different beats?

Elastic Stack Beats
1

Hi,

We do now have a working win/file - beats -> kafka -> logstash -> ES dev setup.
And with help from forum users everything is running as it should :slight_smile:

A new thing that was introduced is the thought with different indices for different logtypes.
In the dev env I written all output to logstash-date, but now thinking about splitting it up again.

Are there any pro's to use different indices other than keeping it clean in the log output in kibana?
All ideas and suggestions are welcome :slight_smile:

--
Regards Falk

2

Separate means you can handle individual retention for each type.

3

This topic was automatically closed after 21 days. New replies are no longer allowed.