I'm a new to ELK stack. Can anyone advice me for my below doubt.
For example, I have a two apache webserver and I installed filebeat on that and I enabled apache module. Also I configured apache.conf file in logstash. So for now my both apache server logs sent it to one common index that I specified in apache.conf file.
My requirement is how to create the one or more index and pass the apache server logs to particular index instead of common one.
apache server1 --> apache.conf (logstash/conf.d)
apache server1 --> apache1.conf (logstash/conf.d)
Can anyone please advise this.