diff --git a/salt/logstash/pipelines/config/so/9050_output_elasticsearch.jinja b/salt/logstash/pipelines/config/so/9050_output_elasticsearch.jinja new file mode 100644 index 000000000..eb0d8ef0c --- /dev/null +++ b/salt/logstash/pipelines/config/so/9050_output_elasticsearch.jinja @@ -0,0 +1,20 @@ +{%- if grains['role'] == 'so-eval' -%} +{%- set ES = salt['pillar.get']('manager:mainip', '') -%} +{%- else %} +{%- set ES = salt['pillar.get']('elasticsearch:mainip', '') -%} +{%- endif %} +output { + if [event][module] == 'elasticsearch' { + elasticsearch { + id => "elastic_logs" + pipeline => "filebeat-%{[agent][version]}-elasticsearch-%{[fileset][name]}-pipeline" + hosts => "{{ ES }}" + index => "so-grid-%{+YYYY.MM.dd}" + template_name => "so-common" + template => "/templates/so-common-template.json" + template_overwrite => true + ssl => true + ssl_certificate_verification => false + } + } +}