epiphany icon indicating copy to clipboard operation
epiphany copied to clipboard

[FEATURE REQUEST] Filebeat to log to different indexes based on log_type property

Open toszo opened this issue 4 years ago • 0 comments

Is your feature request related to a problem? Please describe. Applications that logs data to console output need to distinguish "Audit logs" from other logs.

Describe the solution you'd like Configure Filebeat to push logs to different indexes based on log_type https://www.elastic.co/guide/en/beats/filebeat/current/elasticsearch-output.html#index-option-es

Describe alternatives you've considered None

Additional context Audit logs to be a separate index that is going to have different governance rules (rotation, storage, etc.)


DoD checklist

  • Changelog
    • [ ] updated
    • [ ] not needed
  • COMPONENTS.md
    • [ ] updated
    • [ ] not needed
  • Schema
    • [ ] updated
    • [ ] not needed
  • Backport tasks
    • [ ] created
    • [ ] not needed
  • Documentation
    • [ ] added
    • [ ] updated
    • [ ] not needed
  • [ ] Feature has automated tests
  • [ ] Automated tests passed (QA pipelines)
    • [ ] apply
    • [ ] upgrade
    • [ ] backup/restore
  • [ ] Idempotency tested
  • [ ] All conversations in PR resolved
  • [ ] Solution meets requirements and is done according to design doc
  • [ ] Usage compliant with license

toszo avatar Oct 28 '20 14:10 toszo