Hi, I'm using ELK version 7.16.2 and I have configured Filebeat and I want to ingest log on dedicated index rather than on default filebeat index. Please help me on this. Please find the filebeat.yml file configuration below. ###################### Filebeat Configuration Example #################…

Hi @stephenb Thanks for your support. I have followed 1st approach from below two approaches... Set it all up in filebeat (when you do this create a default ILM policy for you, which you can later edit) setup your template, policy and rollover alias etc... etc. in elasticsearch then use minimal …

Perhaps take a look at [image] Filebeat writing to its own index Beats As explained in the post I linked, You have a moduled enabled in your configuration whether it is important now or not... It overrides the output settings in some cases but let's put that aside there…

Discuss the Elastic Stack

Ingest log in specific index

Elastic Stack Beats

stephenb (Stephen Brown) November 21, 2023, 6:18am 2

Perhaps take a look at

Topic		Replies	Views
Filebeat puts all logs in only one index Beats filebeat	3	673	December 4, 2020
How to set cutom index in filebeat Beats filebeat	4	319	June 16, 2022
Filebeat writing to its own index Beats filebeat	49	3622	September 2, 2022
Create custom index while sending logs from filebeat to elasticsearch Beats filebeat	1	264	December 22, 2022
Filebeat for both system\|service logs and application logs Beats filebeat	8	558	August 14, 2019

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Ingest log in specific index

Related topics