Lab4 - Ex9

filebeat.prospectors:                                                                                                                                                                                  
  - type: log                                                                                                                                                                                          
    enabled: true                                                                                                                                                                                      
    paths:                                                                                                                                                                                             
      - /home/elastic/datasets/java_stack_trace.log                                                                                                                                                    
    fields:                                                                                                                                                                                            
      type: "java_stack_trace"                                                                                                                                                                         
    multiline.pattern: '^[[:space:]]'                                                                                                                                                                  
    multiline.negate: false                                                                                                                                                                            
    multiline.match: after                                                                                                                                                                             
                                                                                                                                                                                                       
setup.template.settings:                                                                                                                                                                               
    index.number_of_shards: 1                                                                                                                                                                          
                                                                                                                                                                                                       
output.elasticsearch:                                                                                                                                                                                  
  hosts: ["localhost:9200"]                                                                                                                                                                            
                                                                                                                                                                                                       
output.elasticsearch.index: 'filebeats-%{[fields.type]}-%{+yyyy.MM.dd}'                                                                                                                                
                                                                                                                                                                                                       
setup.template.enabled: false