output.elasticsearch: hosts: ["http://172.17.91.21:9200"] index: "logs-%{[beat.version]}-%{+yyyy.MM.dd}" indices: - index: "ftjf-test-jar_logs-${ES_DATE}-info" when: and: - equals: fields.type: "jar" - contains: message: "INFO"