If you need to manage several data streams for one LOGSTASH instance, you can configure the elasticsearch output like this in your logstash configuration: We must use a filter to configure the data_stream parameters (type, dataset and namespace) filter: |- mutate { add_field => { "[dat…

Manage several data stream(s) in the elasitcsearch output with interpolation

system (system) Closed June 6, 2023, 6:23pm 3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
String inteprolation in logstash data_stream fields Logstash	7	773	November 23, 2022
Logstash elasticsearch output, expand variables in data stream parameters Logstash	3	1393	July 7, 2021
Trouble with string interpolation in datastream naming Logstash	4	158	April 2, 2024
Badly formatted index, after interpolation still contains placeholder Logstash ilm-index-lifecycle-management , datastreams	15	1463	November 14, 2023
Use field name in datastream namespace or dataset Logstash	6	2779	May 12, 2022