Treatments by filebeat files

Hello everybody :smiley:

I need you to configure my filebeat. In fact, I have two logfiles ( /var/log/alpha.log and /var/log/beta.log )
image

Now, i want create a pipeline with two different treatments... something like this :

I know it's false but I want to do a processing by file and provide the result in a specific index, is it possible ?

Thanks for your help

Yes you can either use a variable for the index name or u can create multiple elasticsearch outputs contained in if statements with different index settings.

1 Like