You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
In case the user wants to use a custom index in Elasticsearch, we should provide a way for the user to configure the index name and have the Beat take care of adjusting the template, dashboards and the index where to insert the data.
What's available
Right now, if the user wants to use a custom index the following steps are done:
edit the template to use the right ES index name
during setup (-setup command line option), the user needs to specify the -E "dashboards.index=new_index" to adjust the Kibana index pattern and dashboards.
The issues
As of Dynamically generate template on startup #3681, the Beat will generate the template at startup, and there is not possible to edit the template anymore. So, we need to generate the template to include the right configured index pattern.
Where do we configure the ES index name? Right now, you can configure the custom index when loading the dashboards under dashboards.index, and it will change the index pattern and the dashboards. You can also configure the index where the data is stored in Elasticsearch:
underoutput.elasticsearch.index in case ES output is enabled, under output.logstash.index in case of Logstash output.
In conclusion, there are different configuration options to configure the same index name. It would be nice to unify them into a single configuration option, maybe outside the output section.
In case the user wants to use a custom index in Elasticsearch, we should provide a way for the user to configure the index name and have the Beat take care of adjusting the template, dashboards and the index where to insert the data.
What's available
Right now, if the user wants to use a custom index the following steps are done:
-setupcommand line option), the user needs to specify the-E "dashboards.index=new_index"to adjust the Kibana index pattern and dashboards.The issues
As of Dynamically generate template on startup #3681, the Beat will generate the template at startup, and there is not possible to edit the template anymore. So, we need to generate the template to include the right configured index pattern.
Where do we configure the ES index name? Right now, you can configure the custom index when loading the dashboards under
dashboards.index, and it will change the index pattern and the dashboards. You can also configure the index where the data is stored in Elasticsearch:under
output.elasticsearch.indexin case ES output is enabled, underoutput.logstash.indexin case of Logstash output.In conclusion, there are different configuration options to configure the same index name. It would be nice to unify them into a single configuration option, maybe outside the
outputsection.cc-ed @ruflin @tsg