If I have several different log files in a directory, and I'm wanting to forward them to logstash for grok'ing and buffering, and then to downstream Elasticsearch. As the files are coming out of Filebeat, how do I tag them with something so that logstash knows which filter to apply? So if I have: …

andrewkroh (Andrew Kroh) March 18, 2016, 1:22pm 4

If you want to apply conditional filtering based on the filename then use the source field.

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

How to tag log files in filebeat for logstash ingestion?