From 0510a68afe35bf2b25efbd8422e858a837d98684 Mon Sep 17 00:00:00 2001 From: bhushan-dc Date: Mon, 28 Oct 2024 11:22:17 +0530 Subject: [PATCH] create new filebeat pattern --- diagnostics/opensearch/filebeat/conf/filebeat-k8s.yml | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) diff --git a/diagnostics/opensearch/filebeat/conf/filebeat-k8s.yml b/diagnostics/opensearch/filebeat/conf/filebeat-k8s.yml index 89f9750..c38ce05 100644 --- a/diagnostics/opensearch/filebeat/conf/filebeat-k8s.yml +++ b/diagnostics/opensearch/filebeat/conf/filebeat-k8s.yml @@ -39,18 +39,19 @@ processors: target: '' fields: datastream: '${ALIAS:unknown}' -setup.template.name: "filebeat-7.11.2" -setup.template.pattern: "filebeat-7.11.2-*" +setup.template.name: "filebeat-%{[agent.version]}" +setup.template.pattern: "filebeat-%{[agent.version]}-*" output.elasticsearch: hosts: '${ELASTIC_HOST}' + index: "filebeat-%{[agent.version]}-new-%{+yyyy.MM.dd}" indices: - index: "%{[datastream]}" when.not.equals: datastream: "unknown" - - index: "filebeat-7.11.2-%{[tenant.name]}-%{[kubernetes.container.name]}-%{+yyyy.MM.dd}" + - index: "filebeat-%{[agent.version]}-new-%{[tenant.name]}-%{[kubernetes.container.name]}-%{+yyyy.MM.dd}" when.equals: serviceLevelIndex: "yes" - - index: "filebeat-7.11.2-%{[tenant.name]}-%{+yyyy.MM.dd}" + - index: "filebeat-%{[agent.version]}-new-%{[tenant.name]}-%{+yyyy.MM.dd}" when.equals: tenantLevelIndex: "yes" bulk_max_size: '${BULK_MAX_SIZE:50}'