We do not need DEBUG and INFO logs coming into ELK but only for one or more components e.g. hostname and index name.
From below link add exclude_lines for DEBUG and INFO - Exclude_lines: [‘^DEBUG’, ‘^INFO’] but to include some of hostname and index name which I think I need add include_lines: ['^hostname', '^indexname'] on filebeat.yml
Can some confirm and advice please.
Thanks