Multiple Index in Filebeat.yml configuration file


#1

Hi,

I am using filebeat to ship log into logstash server. I want to send logs from different harvester into different index. Example: I want to send application log in application index and syslog in syslog index. From multiple server I want to send syslog to a single syslog index. How will I define different index name for each harvestor in filebeat.yml configuration file?


(Mark Walkom) #2

You currently cannot, it's a basic read and ship.
If you want to do this then put LS in the middle.


(system) #3