Index logstash in kibana

[Sujith (Kumar)]

How to index logstash-* in kibana.

Im using ELK stack 5.2 version and i have indexed filebeat, metricbeat, packetbeat and winlogbeat.

Im using filbeat config sending logs to logstash->elasticsearch->kibana

i need to index logstash, please tel us how do i do that.

please find my logstash configuation below.

input {
beats {
port => 5044
type => "log"
}
}

output {
elasticsearch {
hosts => "bngwidap108.aonnet.aon.net:9200"
manage_template => false
index => "%{[@metadata][beat]}-%{+YYYY.MM.dd}"
document_type => "%{[@metadata][type]}"
}
}

[magnusbaeck (Magnus Bäck)]

How to index logstash-* in kibana.

It's not clear what you mean by this.

[Sujith (Kumar)]

i mean i couldn't able to index logstash.

[magnusbaeck (Magnus Bäck)]

Yes, but I don't understand what "index logstash" means.

[prodrg]

Do you want to send the data to an index called logstash-*?

With your current output settings, you are sending it to the index "%{[@metadata][beat]}-%{+YYYY.MM.dd}". If you want to send to logstash-*, the index key on the output file should have the value "logstash-%{+YYYY.MM.dd}" instead.