Hi,@hunsw
This is because the data source and structure of both data is differ, so i just try to make it separate.
This is config.file for [logstash_cardax]
input {
file {
path => ["/home/w/ctest.log"]
start_position => "beginning"
sincedb_path => "/dev/null"
}
}
filter {
} #End of FILTER
output {
elasticsearch {
hosts => ["http://xx.xx.xx.xxx:9200/"]
index => "cctest-log"
user => "elastic"
password => "xxxxxxxxxxxxxxxxx"
}
}
This is config.file for [logstash_nagios]
input {
file {
path => ["/usr/local/nagios/var/nagios.log"]
start_position => "beginning"
sincedb_path => "/dev/null"
}
}
filter {
}
output {
elasticsearch {
hosts => ["http://xx.xx.xx.xxx:9200/"]
index => "<nagios-{now/d}-000001>"
user => "elastic"
password => "xxxxxxxxxxxxxxxx"
}
}
this is pipeline.yml
- pipeline.id: logstash_nagios
path.config: "/etc/logstash/conf.d/nagios.conf"
pipeline.workers: 1
- pipeline.id: logstash_cardax
path.config: "/etc/logstash/conf.d/cardax.conf"
pipeline.workers: 2