How to configure Elastic Agent to stream different data to different instances of ElasticSearch?

starstone
Fri, 11 Oct 2024 14:43:36 +0000
Beats

Hi

How do you configure Elastic Agent to stream security logs to a dedicated instance of Elasticsearch and other data to a different instance of ElsticSearch? I want two segregated instances of Elasticsearch: one dedicated to support SIEM functionality; second to support obervability/enterprise system performance monitoring. I want to avoid performance monitoring impacting the operational performance of the SIEM functionality.

Thanks.

6 posts - 4 participants