Filebeat 7.11.0 multiples path and multiples index

Elastic Stack Beats
1

Hi, I need to create several indexes for different log files.
I am using the following settings:

setup.ilm:
  enabled: false
setup.template:
  enabled: true
  name: "log_dev_testing
  pattern: "log_dev_testing-*"
  settings.index.number_of_shards: 3
  settings.index.codec: best_compression

ignore_older: 90d
logging.level: debug
logging.metrics.period: 10s
logging.to_files: true
logging.files:
  rotateeverybytes: 16777216
  keepfiles: 7
  permissions: 0600

filebeat.inputs:
- type: log
  enabled: true
  fields: {
    app : testing-XX
  }
  paths:
    - "/var/log/ftp/XX/debug.log"
    - "/var/log/ftp/XX/operations_debug.log"

- type: log
  enabled: true
  fields: {
    app: testing-XXX
  }
  paths:
    - "/var/log/ftp/XXX/debug.log"
    - "/var/log/ftp/XXX/operations_debug.log"

output.elasticsearch:
  hosts: ["server:9200"]
  protocol: "https"
  username: "XXXXXXXXXXXX"
  password: "XXXXXXXXXXXX"
  ssl.verification_mode: none
  indices:
    - index: "log_dev_testing_xx-%{+yyyy.MM.dd}"
      when.contains:
        app: "testing-xx"
    - index: "log_dev_testing_xxx-%{+yyyy.MM.dd}"    
      when.contains:
        app: "testing-xxx"

In the Kibana I do not see that the index is being created.

Is there something wrong with my setup?

Any ideas??

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.