Hello all. I am sending logs of windows to a index using winlogbeat and also I am sending logs of Icinga to other index using icingabeat. The problem I am facing is that the logs are not going to specific index that i have mentioned but instead the logs are going to the cross indices. and merging with each other indices.
Need help in this. Can any one point out the mistake I am doing. Is it a restriction of beats to merge data. Need guidance. Please help! ?
I assume you are using Logstash and have multiple configuration files in a directory? Logstash by default merges these into a single pipeline, which means data from all inputs will go to all outputs unless you use conditionals to control the flow.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.