Hello.
I'm tired of the warnings in my Logstash log file and would like to fix it:
[2018-12-06T16:34:17,200][WARN ][logstash.outputs.elasticsearch] Detected a 6.x and above cluster: the
type
event field won't be used to determine the document _type {:es_version=>6}
And below is an extract of my Logstash input/output files:
Input file:
udp {
port => 5516
type => "apc-log"
}
udp {
port => 5517
type => "ltm-log"
}
udp {
port => 5518
type => "firewall-traffic-log"
}
udp {
port => 5519
type => "firewall-threat-log"
}
Output file:
} else if [type] == "apc-log" { elasticsearch { hosts => ["els04","els03"] user => elastic password => elastic #sniffing => true manage_template => false index => "apc-%{+YYYY.MM.dd}" } } else if [type] == "ltm-log" { elasticsearch { hosts => ["els04","els03"] user => elastic password => elastic #sniffing => true manage_template => false index => "ltm-%{+YYYY.MM.dd}" } } else if [type] == "firewall-traffic-log" { elasticsearch { hosts => ["els04","els03"] user => elastic password => elastic #sniffing => true manage_template => false index => "firewall-%{+YYYY.MM.dd}" } } else if [type] == "firewall-threat-log" { elasticsearch { hosts => ["els04","els03"] user => elastic password => elastic #sniffing => true manage_template => false index => "firewall-%{+YYYY.MM.dd}" }
What other options can I use to seperate out inputs to different pipelines?
Thanks.