Why my log gets to another index

(Flover) #1

Hi everyone, can someone tell me why my log in the "terminal" type is in the index fr- * ?


Logstash conf files:


Thank you in advance

(Christian Dahlqvist) #2

I think if [type] == "frinit" or "frdriver" { should be if [type] in ["frinit", "frdriver"] { and that if "ERROR" or "WARN" in [fr_log_level] { should be changed to if [fr_log_level] in ["ERROR", "WARN"] {. Not sure that is the only issue, but would start by changing that.

(Flover) #3

Thanks, this solved my problem.

(system) #4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.