Dynamic index name when using multiple filebeat instances


(Sakshi Aggarwal) #1

i have a working model of elk but i want a dynamic index name, all i want is to assign a based on my beat.name field.

output {
elasticsearch {
hosts => [ "localhost:9200" ]
index => "%{[beat.name][_id]}"
}
}


(Magnus B├Ąck) #2

The correct way to reference beat.name is %{[beat][name]}


(Sakshi Aggarwal) #3

omgggg !! amazing it worked..

u r such a life saver.


(system) #4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.