i have multiple files i was trying to index all those with different index's , i was wondering how can i manage those.
filebeat i was forwarding to logstash and then output to elastic search.
Example:
/var/log/file1
/var/log/file2
.
.
.
/var/log/filen
i was not sure where i have to tag to filebeat or logstash so , i posted in both forums
you can compute a field in LS and store it for example in [@metadata][index] . Use the field to configure the index (see filebeat -> LS getting started docs for example ES output config). This way you don't have to tag and filter (if-else) things like crazy.
All fields stored under @metadata will be ignored when indexing to ES.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.