I'm using filebeat to collect some of the data:
# rpm -q filebeat
filebeat-6.1.0-1.x86_64
#
per filebeat.yml there are two outputs:
# egrep 'output\..**\:$' /etc/filebeat/filebeat.yml.rpmnew
#output.elasticsearch:
output.logstash:
#
unfortunately, direct access to elasticsearch isn't available and as alternative logstash is my only choice.
My question, since logstash writes data into logstash-* indices and yet filebeat's Dashboards and/or Visualizes reads from metricbeat-*, how shall I deal with this?
Please advise.