I want to send multiple log files from filebeat to elastic.
filebeat.prospectors: - input_type: log paths: - /var/log/postgresql/postgresql-2017-04-21_120121.log document_type: postgresql - input_type: log paths: - /var/log/nginx/alpha-acccess.log document_type: nginx
In the output, I want to send to elasticseach,
output.elasticsearch: # Array of hosts to connect to. hosts: ["localhost:9200"] index: 'postgresql-log' versions.2x.enabled: false
I want to store the "postgresql" logs under the
postgresql index, and the nginx log under the
But here in the filebeat.yml , I can give only 1 name to the index, means these both will be stored under 1 index. How can I store these under different indices ?
I do not want to use logstash as that is too heavy and my system has trouble running logstash.