Dynamic index name when using multiple filebeat instances

Elastic Stack Logstash
1

i have a working model of elk but i want a dynamic index name, all i want is to assign a based on my beat.name field.

output {
elasticsearch {
hosts => [ "localhost:9200" ]
index => "%{[beat.name][_id]}"
}
}

2

The correct way to reference beat.name is %{[beat][name]}

3

omgggg !! amazing it worked..

u r such a life saver.

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.