elk logstash中修改index

标签：elk   index   

    input {
    udp {
        ...
        type => "foo"
    }
    file {
        ...
        type => "bar"
    }
}

output {
    if [type] == "foo" {
        elasticsearch {
            ...
            index => "foo-index"
        }
    } else {
        elasticsearch {
            ...
            index => "bar-index"
        }
    }
}

elk logstash中修改index

标签：elk   index   

原文地址：http://blog.51cto.com/2765034/2091075