Multiple files from beats to logstash


(bob_bza) #1

i have multiple files i was trying to index all those with different index's , i was wondering how can i manage those.
filebeat i was forwarding to logstash and then output to elastic search.
Example:
/var/log/file1
/var/log/file2
.
.
.
/var/log/filen


Multiple files from filebeat
(bob_bza) #2

i was not sure where i have to tag to filebeat or logstash so , i posted in both forums


(Steffen Siering) #3

you can compute a field in LS and store it for example in [@metadata][index] . Use the field to configure the index (see filebeat -> LS getting started docs for example ES output config). This way you don't have to tag and filter (if-else) things like crazy.

All fields stored under @metadata will be ignored when indexing to ES.


(system) #4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.