I just upgraded to version 5. Currently i am using Filebeat to send loglines into logstash which ill in turn filter the data and pass the document into elasticsearch. Now, I am hoping to use the elasticsearch ingest node in place of logstash (i.e. filebeat -> ingest node).
I understand that by using the ingest nodes, i will have to specify the rules and patterns in the pipeline processors. However, i cant seem to find any documentation regarding what index will my document(s) be sent to.
Is it possible for me to define which index to store the document? I want to define it according to the value from a field (i.e. timestamp)