I'm trying to have custom indices for different filebeat modules.
In this example i want to have a custom indices for the apache module, but it doesn't seem to work.
indices:
- index: "filebeat-%{[agent.version]}-apache-error"
when.equals:
event.module: "apache"
setup.template.enabled: true
setup.template.name: "filebeat-%{[agent.version]}"
setup.template.pattern: "filebeat-%{[agent.version]}-*"
setup.template.fields: "fields.yml"
setup.ilm.enabled: false
Any help is appreciated, thanks!