I have data getting logged into the "functionbeat-*" index. This is great but there are multiple classifications of data getting put into this index (e.g. gold data, silver data, bronze data).
I essentially have to control what classifications of data users are able to read. So for example, the user "Yoda" can view all classifications (gold, silver, bronze). The user "Anakin" can only view "bronze data".
Is there a way to force multiple indices from a single functionbeat?
Is there a way to create categorization within a single index?
What is the best approach here?