filebeat condition.or
output.elasticsearch:
hosts: ["http://172.17.91.21:9200"]
index: "logs-%{[beat.version]}-%{+yyyy.MM.dd}"
indices:
- index: "ftjf-test-jar_logs-${ES_DATE}-info"
when:
and:
- equals:
fields.type: "jar"
- contains:
message: "INFO"