How to add custom index using ingest node pipeline?

Elastic Stack Elasticsearch
1

Is it possible to create conditional indexing by using ingest node pipelines? I feel this could be done by the script processor but can someone tell if this is possible?

I am in a scenario where I should decide which is a better way to do custom indexing. I can mention conditions in the metricbeat.yml /filebeat.yml files to get this done. But is this the best way to do custom indexing? There is no logstash in my elastic stack

output.elasticsearch:
          indices:
            - index: "metricbeat-dev-%{[agent.version]}-%{+yyyy.MM.dd}"
              when.equals:
                kubernetes.namespace: "dev"

This is how I have implemented custom indexing in metric/filebeat right now. I have like 20+ namespace in my kubernetes cluster. Please help in suggesting if this could be done by ingest node pipeline or not

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.