How to ship multiple cloud watch log group to logstash and store them in elasticsearch cluster in individual indices

Actually i want to use one functionbeat labmda function for shiping all of my cloudwatch log group to logstash and after processing each of them will be stored in individual index in elastic search.
currently i have been doing the same using multiple function beat lambda function.
How can i do that?

Have you read the Getting started guide of Functionbeat? https://www.elastic.co/guide/en/beats/functionbeat/current/functionbeat-getting-started.html

Dear @kvch ,
I have read the getting started guide but not found any place where the strategy of shipping multiple cloudwatch log is mentioned.Finally i came to solution which is all of my log will be sent to central logstash from there i will dissect the log based on the log group name using conditional logic and store them in individual index.

This topic was automatically closed 20 days after the last reply. New replies are no longer allowed.