Index logstash in kibana

How to index logstash-* in kibana.

Im using ELK stack 5.2 version and i have indexed filebeat, metricbeat, packetbeat and winlogbeat.

Im using filbeat config sending logs to logstash->elasticsearch->kibana

i need to index logstash, please tel us how do i do that.

please find my logstash configuation below.

input {
beats {
port => 5044
type => "log"

output {
elasticsearch {
hosts => ""
manage_template => false
index => "%{[@metadata][beat]}-%{+YYYY.MM.dd}"
document_type => "%{[@metadata][type]}"

How to index logstash-* in kibana.

It's not clear what you mean by this.

i mean i couldn't able to index logstash.

Yes, but I don't understand what "index logstash" means.

Do you want to send the data to an index called logstash-*?

With your current output settings, you are sending it to the index "%{[@metadata][beat]}-%{+YYYY.MM.dd}". If you want to send to logstash-*, the index key on the output file should have the value "logstash-%{+YYYY.MM.dd}" instead.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.