Elasticsearch Destination

​

Supported data types:

​

Configuration

​

Advanced Options

​

Logstash Index Configuration

​

Example Logstash Configuration

if [cluster] == "staging-cluster" {
  mutate {
    add_field => {
      "elasticsearch.index" => "staging-cluster-%{+YYYY.MM.dd}"
    }
  }
}

• The exporter will use the elasticsearch.index attribute to determine the target index
• The index name can include dynamic date patterns (e.g., %{+YYYY.MM.dd})
• You can use any Logstash condition to set different indices based on your requirements

​

Notes

• If elasticsearch.index is not set, the exporter will use the default index configuration
• The index name must follow Elasticsearch naming conventions
• Date patterns in the index name will be evaluated at the time of sending the logs