Multiple Index

Elastic Stack Beats
1

Dear all
I have a problem with filebeat configuration. I enable two different module and I need to write log in two different index ,

  • myindex-module1-data
  • myindex-module2-data

Is it possible?

I read about filebeat.prospectors as follow but I want continue to use modules


filebeat.prospectors:

- type: log

  enabled: true
  paths:
    - /var/log/index1/*
  json.add_error_key: true
  json.message_key: log
  #json.keys_under_root: true

  pipeline: geoip

- type: log
  paths:
    - /usr/local/index2/*.log
  fields:
    type: "index2"
  fields_under_root: true

thanks for your time

2

I found this post

I'm trying

3

It works!

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.