Filebeat multiple input and multiple output indices

I am getting error with filebeat.yml what am I missing?

 filebeat test config
Exiting: error initializing publisher: missing condition

 cat filebeat.yml
filebeat.inputs:

- type: log
  paths:
    - /var/log/cloud-init.log
  tags: ["cloud-init"]
- type: log
  paths:
    - /var/log/boot.log
  tags: ["boot"]
- type: log
  paths:
    - /var/log/yum.log
  tags: ["yum"]
- type: log
  paths:
    - /var/log/httpd/*_log
  tags: ["apache"]
  fields:
    apache: true
  fields_under_root: true


filebeat.config.modules:
  path: ${path.config}/modules.d/*.yml
  reload.enabled: false

#setup.template.name: "filebeat"
#setup.template.pattern: "filebeat-*"
#setup.template.fields: "fields.yml"
#setup.template.overwrite: true

setup.template.settings:
  index.number_of_shards: 5
  index.number_of_replicas: 1

output.elasticsearch:
  hosts: ["https://vpc-jdev1-asdasdasasd.us-west-2.es.amazonaws.com:443"]
  indices:
  - index: "yum-%{+yyyy.MM.dd}"
    when.containes:
      tags: "yum"
  - index: "boot-%{+yyyy.MM.dd}"
    when.containes:
      tags: "boot"
  - index: "apache-%{+yyyy.MM.dd}"
    when.containes:
      tags: "apache"
  - index: "cloud-init-%{+yyyy.MM.dd}"
    when.containes:
      tags: "cloud-init"


processors:
  - add_host_metadata: ~
  - add_cloud_metadata: ~

logging.level: info
logging.to_files: true
logging.files:
  path: /var/log/filebeat
  name: filebeat
  keepfiles: 3
  permissions: 0644

setup.ilm.enabled: false
setup.pack.security.enabled: false
setup.xpack.graph.enabled: false
setup.xpack.watcher.enabled: false
setup.xpack.monitoring.enabled: false
setup.xpack.reporting.enabled: false

Is it written like this in your config file?

If so, this is a typo, it is when.contains.

Thanks @leandrojmp for quick reply.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.