Why my log gets to another index


(Flover) #1

Hi everyone, can someone tell me why my log in the "terminal" type is in the index fr- * ?

Filebeat:
https://pastebin.com/zB1cefRe

Logstash conf files:

https://pastebin.com/BWUBVuLy
https://pastebin.com/hms3fMGz

Thank you in advance


(Christian Dahlqvist) #2

I think if [type] == "frinit" or "frdriver" { should be if [type] in ["frinit", "frdriver"] { and that if "ERROR" or "WARN" in [fr_log_level] { should be changed to if [fr_log_level] in ["ERROR", "WARN"] {. Not sure that is the only issue, but would start by changing that.


(Flover) #3

Thanks, this solved my problem.


(system) #4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.