Output different prospectors' logs to different Elasticsearch indices?

(Dan S.) #1

I'm building a simple setup that uses filebeat to write straight to elasticsearch. I fear the answer to the following will be "run multiple filebeat instances", but is there any hope of configuring multiple output indices in Elasticsearch for different prospectors, either by naming the prospectors and enabling the output plugin to decide based on prospector name, or by allowing each prospector to have its own output section?

I'm trying to solve the problem of multiple services running on the same host whose log output belongs in different indices. It'll be useful to know whether anything like this is on the horizon, or whether I should solve my problems another way. Thanks!

Different types of json logs to different ES indices without using Logstash
(Mark Walkom) #2

That is the answer unless you also use Logstash.

(system) #3