Multiple indexes output and ilm coliision

[Aviad_Hadida]

Hi.

I have a use case where i have several index i would like to use. But it seems that index name are not affected when using ilm.
Look on the linked discussion:

Output to multiple indexes straight from filebeat.yml?

I'm trying to set up filebeat to ingest 2 different types of logs. They're in different locations and they should output to different indexes. This is what I have so far: filebeat.prospectors: - type: log enabled: true paths: - /var/log/index1/* json.add_error_key: true json.message_key: log #json.keys_under_root: true pipeline: geoip - type: log paths: - /usr/local/index2/*.log fields: type: "index2" fields_under_root: true #============================= File…

Is there a way to achieve this behavior with ilm? How should i do it?

Thanks

[tsmori (Tim Mori)]

I need to get this working too. I was able to change the index using the setup.ilm settings, but if the index directives need to be in filebeat.yml, might be stuck. If they can go in the module.yml maybe it work.