Hello
Is there a way to let Functionbeat write to multiple indices?
I have seen that it can write to only one of many indices according to defined rules.
Example:
output.elasticsearch:
indices:
- index: "index-first"
when.contains:
message: "field1"
- index: "index-second"
when.contains:
message: "field2"
The above will write to index-first if field1 exists and to index-second if field2 exists.
What I want is to write tow copies of same data to both indices, can that be done from Functionbeat side?
Hello Kvch, thank you for your reply
As per docs and the things I tried.
"Functionbeat uses the first matching rule in the array."
so Functionbeat will write to only the first index that matches the rule.
What I want is that Functionbeat write to two indices, not just the first one that matches the rule.
Hope my need is clear now.
Thanks
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.