if[type] == "IISLogs"
{
elasticsearch
{
index => "iislogs"
hosts => ["myserver:9200"]
}
}
else
{
elasticsearch
{
index => "filebeat-2016.03.27"
hosts => ["myserver:9200"]
}
}
Since, filebeat indexes are created daily i.e. filebeat-YYYY-mm-dd format. How can I specify the latest index of filebeat in above output configuration. If I specify filebeat-2016.03.27, it works fine. But I want something generic.
How can I achieve that ?