How to create Index Template & ILM Policy for Logstash output in Filebeat

Elastic Stack Beats
1

Hi,
If I set the filebeat output to Logstash and give customize name to the index in the output section of Logstash pipeline code, in that case how to create the index template and ILM policy (For Elasticsearch output in filebeat the index template and ILM policy are automatically applied)?

input {
    beats {
        port => "5046"
    }
}
output {
    elasticsearch {
        hosts => ["X.X.X.X:9200", "X.X.X.X:9200", "X.X.X.X:9200"]
        index => "test-log"
        user => "username"
        password => "password"
   }
}

Thanks.

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.