Hello, I'm wondering if filebeat is able to index in elasticsearch with the date of the log line it reads, not the the date of the day?
-- What I want to put in place:
*.log (from august 2016) > filebeat > elastisearch > kibana (the goal is to see the log with the date of the event not with the day where filebeat reads the log)
-- key points:
I want to keep my setup as simple as possible (skip logstash step);
-- Here is my filebeat conf file:
hosts: ["http://elastic-01:9200", "http://elastic-02:9200" , "http://elastic-03:9200"]
rotateeverybytes: 10485760 # = 10MB
Thanks in advance for your answers.