Hi there, I have around 8-10 devices which are sending logs to logstash over syslog. I need to if I can have separate index created per dvice? like logstash-router1-, logstash-firewall-, logstash-nginx-* and so on? What do I need to do to achieve the same? Rewrite separate templates or mappings? P…

I would start with an index name that starts with logstash- (so it matches the default template) and not worry about templates until you find a problem that requires one.

Discuss the Elastic Stack

How to create separate index for separate devices?

Elastic Stack Logstash

Blason (R) March 17, 2018, 6:50pm 3

Hey,

Thanks and how about mapping then? I guess that would be changed as well?

Topic		Replies	Views
Mapping per index Elasticsearch	4	376	July 6, 2017
How do I create my own Index name? Logstash	8	12930	April 24, 2019
Syslog index Elasticsearch	2	1845	July 5, 2017
Index template not taking effect on index created Logstash	6	659	January 5, 2018
Create multiple indexes with same logstash config file Logstash	2	9328	September 14, 2017

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

How to create separate index for separate devices?

Related topics