Different index name for different filebeat instances

[syedsfayaz (fayaz)]

Hi

Elastic stack version 6.6.1
Setup:
filebeat -- Elastic Search -- Kibana

I have different environments windows and Linux. I want to forward logs from multiple servers to elastic search . EX:- server1, 2, 3 to elastic search and forward logs. I can install filebeat on each server and configure it to forward logs to elastic search. Can I create a index name with the server name. So it will be easy to create a dashboard and differentiate logs coming from different servers.
Note: i will be using modules. like IIs and may be a different module for Tomcat access logs.

If its possible where can I make these configuration changes.

[warkolm (Mark Walkom)]

Using Environment variable in ES index name should be what you want

[syedsfayaz (fayaz)]

@warkolm
Can you please look at this error i'm getting.

File beat throwing warning for custom index pattern

Hi I am seeing this weird issue on my file beat module 6.6.2 . When I have default configuration in the filebeat.yml and iis module enabled. The file beat sends logs fine but when I try to add an index pattern it is throwing error in logs and not sendiing logs to elastic search. Please let me know what is wrong with my configuration. Here is my configuration. #==================== Elasticsearch template setting ========================== setup.template.name: 'filebeat-win' setup.template.p…