Hi all,
I have logs which are pushed into the Elasticsearch from multiple sources, say Source A and B...
In Log Source A
...config.d/110-system-sources.conf
...
...
tag system.messages
...
...
or
/config.d/200-openstack-filters.conf
<filter **>
host ${hostname}
@type SourceA
In Log Source B
...config.d/110-system-sources.conf
...
...
<< NO TAG>>
...
...
No /config.d/200-openstack-filters.conf in Source B
Now I would like to have separate Indices for these 2 types of logs.