On Tuesday, November 04, 2014 at 00:57 CET,
Alejandro Alves <[email protected]> wrote:
> El miércoles, 19 de febrero de 2014 05:02:40 UTC+13, Binh Ly
> escribió:
>
> > You can specify the index name in the elasticsearch output:
> > http://logstash.net/docs/1.3.3/outputs/elasticsearch#index
> > For example, let's say I have a field named clientip, I can make
> > indexes named ls-clientip by specifying something like this:
> > output {
> > elasticsearch {
> > host => "localhost"
> > index => "ls-%{clientip}"
> > }
> > }
>
> How or where do you declare the variables such as %{clientip}?
They are fields in the message, often populated by a 'grok' filter.
Note that not all strings in Logstash configuration files support
%{variablename} interpolation. Where you can use such references
is unfortunately underdocumented.
--
Magnus Bäck | Software Engineer, Development Tools
[email protected] | Sony Mobile Communications
--
You received this message because you are subscribed to the Google Groups
"elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/elasticsearch/20141110075747.GD6370%40seldlx20533.corpusers.net.
For more options, visit https://groups.google.com/d/optout.
