I need to analyse different log files which all have different patterns.
Is it possible to have either:
One filebeat instance which will send the log lines to different ingest nodes depending on the filename.
One ingest node which can match different patterns according to the filename without going through all patterns sequentially.
Or must I have one ingest node and one filebeat instance for every different type of log?