Multiple document type index

Elastic Stack Beats
1

Hi,

I want to send log to logstash from different path to seperate indices.

filebeat:
  prospectors:
    -
      paths:
        - /data/*.log
      input_type: log
      document_type: firstlog
    -
      paths:
        - /data/*.log
      input_type: log
      document_type: secondlog

something like the config i have above. I an using filebeat 1.3

is this possible and also if i need additional config?

2

the document_type will be available via [@metadata][type] in logstash. You can do any filtering you want in logstash. Using fields settings you can add some other fields with additional meta-data.

3

This topic was automatically closed after 21 days. New replies are no longer allowed.