Requirement is to create a custom index in filebeat. Which is running as a daemonset in Kubernetes. I need logs of different namespace to have separate index. Is there any way to implement this as filebeat does not provide flexibility like log stash
Resolved this issue by using below in filbeat.yml
Go to filebeat.tml file then make this change(assuming u have provided Kubernetes meta data as input in filebeat.yml
Once u do this restart filbeat then next create index pattern this should be listed when u created an index pattern. Create the index pattern and check the logs it worked for me.