I'm using filebeat
to collect some of the data:
# rpm -q filebeat
filebeat-6.1.0-1.x86_64
#
per filebeat.yml
there are two outputs:
# egrep 'output\..**\:$' /etc/filebeat/filebeat.yml.rpmnew
#output.elasticsearch:
output.logstash:
#
unfortunately, direct access to elasticsearch isn't available and as alternative logstash is my only choice.
My question, since logstash
writes data into logstash-*
indices and yet filebeat
's Dashboards and/or Visualizes reads from metricbeat-*
, how shall I deal with this?
Please advise.