Hi , i'm creating index name dynamically but when I'm passing the field to output i'm getting the variable name ([@metadata][index]): mutate { add_field => { "[@metadata][index_prefix]" => "system-secure" } } output : output { elasticsearch { hosts => [ "il-infra-es1", "il-infra-es2", "il-i…

Passing to output index field but getting [@metadata][index]

rcowart (Rob Cowart) March 15, 2020, 2:02pm 9

I think what you are looking for in current versions of Beats is event.module.

Topic		Replies	Views
What's wrong with my mutate filter? Logstash	3	325	October 12, 2020
Output based on metadata field is not working Logstash	4	694	September 10, 2019
Issue with output plugin type elasticsearch in logstash Logstash	5	461	October 20, 2022
Logstash output: dynamically multiple indexes Logstash	2	2185	February 15, 2017
Output to different index based on field Logstash	12	3660	February 5, 2022

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Passing to output index field but getting [@metadata][index]

Related topics