Logstash-Forwarder and Redis

[magnusbaeck (Magnus Bäck)]

I think LSF's README file explains it's reason for being. See below for how to create different indexing depending on the message.

How to handle multiple inputs with Logstash to different indices

Use the grok filter to extract the project name from the input file path (stored in the path field), then reference that field when setting the index pattern of the elasticsearch output. elasticsearch { ... index => "logstash-%{project}-%{+YYYY.MM.dd}" }