Topbeat has topbeat-, filebeat has filebeat-, etc. Is there a specific reason for that? As in, it's best to do it that way? Or is it just convenient to have the default set like that?
My current practice is to shove everything into one logtstash-* index. Then I can just search away. Would searches, or creating visualizations and dashboards, be easier/faster if I had multiple index patterns?