I am new to ELK, I have installed Logstash, Elastic search and Kibana. My use case is as below:
Logstash will read the application log, parse it and send to Elastic Search. Can you please suggest whether I need to write in the application log in a specific way, such that this is readable by Logstash? Also, since Logstash parses the log to make appropriate indexes for Elastic Search, how will Logstash get the tags against which it will parse and create indexes for Elastic search?
Also, I am looking for some documentation for a clustered deployment of ELK.