Logstash output configuration for beat

Elastic Stack Logstash
1

Hi Team,
My logstash is sending Json log data to below two indexes

  1. project-%{environment}-%{type}-%{+YYYY.MM.dd}
  2. filebeat-%{+YYYY.MM.dd}

PFB my logstash.conf, what condition i should put to stop sending Json log data on filebeat-* indexes.

I have almost 10 such types, and don't want to use lot of IF/ELSE conditions.

output {
if [type] == "json-log"
{
elasticsearch {
hosts => ["http://elasticsearch....:9200"]
index => "project-%{environment}-%{type}-%{+YYYY.MM.dd}"
}
}
elasticsearch {
hosts => ["http://elasticsearch.....:9200"]
index => "%{[@metadata][beat]}-%{+YYYY.MM.dd}"
}
}

Thanks & Regards,

2

Perhaps you can tag those events in a uniform way and use that in your conditional. Or use the in operator:

if [type] in ["type1", "type2", ..., "typeN"] { ...
3

Thanks.
I found beats are sending "type = random_logs", i used that to filter.