Create one index for host. How can I do it?
-
- Posts: 2
- Joined: Sun Oct 25, 2020 10:00 pm
Create one index for host. How can I do it?
I would like to create one index, like logstash-IP-date, how can I do it?
Re: Create one index for host. How can I do it?
I would advise against this for the reasons mentioned in https://support.nagios.com/forum/viewto ... 16&t=60470, but it is possible with an elasticsearch output and the index option "index => "logstash-%{host}-%{+YYYY.MM.dd}".
See https://www.elastic.co/guide/en/logstas ... arch-index for details. I'd also recommend sending these indexes to another server running elasticsearch if you go this route - you can't disable the default option that writes to logstash-%{+YYYY.MM.dd} so if you add another output like this you would be doubling the data stored on the NLS machine.
See https://www.elastic.co/guide/en/logstas ... arch-index for details. I'd also recommend sending these indexes to another server running elasticsearch if you go this route - you can't disable the default option that writes to logstash-%{+YYYY.MM.dd} so if you add another output like this you would be doubling the data stored on the NLS machine.
You do not have the required permissions to view the files attached to this post.
As of May 25th, 2018, all communications with Nagios Enterprises and its employees are covered under our new Privacy Policy.