epiphany
epiphany copied to clipboard
[FEATURE REQUEST] Filebeat to log to different indexes based on log_type property
Is your feature request related to a problem? Please describe. Applications that logs data to console output need to distinguish "Audit logs" from other logs.
Describe the solution you'd like
Configure Filebeat to push logs to different indexes based on log_type
https://www.elastic.co/guide/en/beats/filebeat/current/elasticsearch-output.html#index-option-es
Describe alternatives you've considered None
Additional context Audit logs to be a separate index that is going to have different governance rules (rotation, storage, etc.)
DoD checklist
- Changelog
- [ ] updated
- [ ] not needed
- COMPONENTS.md
- [ ] updated
- [ ] not needed
- Schema
- [ ] updated
- [ ] not needed
- Backport tasks
- [ ] created
- [ ] not needed
- Documentation
- [ ] added
- [ ] updated
- [ ] not needed
- [ ] Feature has automated tests
- [ ] Automated tests passed (QA pipelines)
- [ ] apply
- [ ] upgrade
- [ ] backup/restore
- [ ] Idempotency tested
- [ ] All conversations in PR resolved
- [ ] Solution meets requirements and is done according to design doc
- [ ] Usage compliant with license