Filebeat doesn't resolve variable set for kubernetes pod

Elastic Stack Beats
1

Dears,

I want to customize index as per the environment (prod, dev , ...), the filebeat couldn't substitue the value of "kubernetes.labels.env" and put instead "na"
The index definiton inside output section in filebeat.yml is as described below:

index: "filebeat-%{[agent.version]}-%{[kubernetes.labels.env]:na}"

I tried in vain those syntaxes:
index: "filebeat-%{[agent.version]}-%{kubernetes.labels.env:na}"
&&
index: "filebeat-%{[agent.version]}-${kubernetes.labels.env:na}"

Please advise,
Regards.

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.