Hi All,
I have multiple logstash running netflow module, and all logstash will send the data back to the same elasticsearch cluster to the same index.
My question is, how can I distinguish the data sending from different logstash? If using pipeline, I can add the tag so that to distinguish, but for netflow modules, how can I do that?
Thanks in advance.
Kenneth