ELK target cluster and redactions

I am planning on having multiple clusters and some files that go through the stack will need ip redactions and so on. What I want to do is have some way for logstash to determine, based on certain requirements, which cluster to send the output to and determine weather or not it needs any redactions. Is there a way through some config file or external file of some sorts to accomplish this?

Is this better in the Logstash topic/area of this Forum? This is the Elasticsearch part :wink:

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.