Different index name for different filebeat instances

Elastic Stack Beats
1

Hi

Elastic stack version 6.6.1
Setup:
filebeat -- Elastic Search -- Kibana

I have different environments windows and Linux. I want to forward logs from multiple servers to elastic search . EX:- server1, 2, 3 to elastic search and forward logs. I can install filebeat on each server and configure it to forward logs to elastic search. Can I create a index name with the server name. So it will be easy to create a dashboard and differentiate logs coming from different servers.
Note: i will be using modules. like IIs and may be a different module for Tomcat access logs.

If its possible where can I make these configuration changes.

2

Using Environment variable in ES index name should be what you want :slight_smile:

3

@warkolm
Can you please look at this error i'm getting.

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.