Answer the question
In order to leave comments, you need to log in
How to set output index name for elasticsearch in Logstash?
Hello!
There is a Filebeat config in which the field is defined log_type
:
filebeat.inputs:
- type: log
enabled: true
paths:
- /home/some/storage/logs/laravel*.log
fields:
log_type: laravel_log
index => "%{[@metadata][beat]}-%{+YYYY.MM.dd}"
%{[@metadata][beat]}
with this field, but %{[log_type]}
does not work. if [log_type] == "laravel_log" { ...some actions... }
?
Answer the question
In order to leave comments, you need to log in
Didn't find what you were looking for?
Ask your questionAsk a Question
731 491 924 answers to any question