Why my log gets to another index

Hi everyone, can someone tell me why my log in the "terminal" type is in the index fr- * ?

Filebeat:
https://pastebin.com/zB1cefRe

Logstash conf files:

https://pastebin.com/BWUBVuLy
https://pastebin.com/hms3fMGz

Thank you in advance

I think if [type] == "frinit" or "frdriver" { should be if [type] in ["frinit", "frdriver"] { and that if "ERROR" or "WARN" in [fr_log_level] { should be changed to if [fr_log_level] in ["ERROR", "WARN"] {. Not sure that is the only issue, but would start by changing that.

Thanks, this solved my problem.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.