How to uniquely identify data from different sources

Yes. Use said grok filter to extract the pieces you want to a different field and reference that field in your elasticsearch output's index option.

https://www.elastic.co/guide/en/logstash/current/event-dependent-configuration.html#logstash-config-field-references

1 Like