Would this work? Would there be any adverse consequences of doing this?
I've tried setting these fields in my filebeat.yml, but the output is still being written to the filebeat-7.11.1* indexes...
If I can get this to work, I plan on hooking that index into a data stream.
After the ilm.enabled change you'll find it most definitely does work. You may need to manually set up index lifecycle management if you're wanting to use it, but otherwise I'm not sure there's any significant adverse consequences.
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.