From the documentation on changing the name of the index that filebeat writes to:
But I was wondering if it would be possible to have filebeat write to an index name that doesn't change:
output.elasticsearch.index: "my-custom-index"
setup.template.name": "my-custom-index"
setup.template.pattern": "my-custom-index"
Would this work? Would there be any adverse consequences of doing this?
I've tried setting these fields in my filebeat.yml, but the output is still being written to the filebeat-7.11.1*
indexes...
If I can get this to work, I plan on hooking that index into a data stream.