Index conditional match in output elasticsearch

[cristianocasella]

Adding a conditional statement to switch the output to different index and/or pipeline basing on a specific filter.
Refer to issue #96

[cristianocasella]

manifest sample:

  class { 'filebeat':
    major_version => '5',
    outputs       => {
      'elasticsearch' => {
        'hosts'    => [
          'http://elasticsearch.domain.ext:9200'
        ],
        'index'    => 'docker-log-%{+yyyy.MM.dd}',
        'pipeline' => 'docker-log',
        'indices'  => [
          'indice' => {
            'name'     => 'docker-warning-%{+yyyy.MM.dd}',
            'filter'   => 'message',
            'pattern'  => 'WARNING',
            'pipeline' => 'docker-warning'
          },
          'indice' => {
            'name'     => 'docker-critical-%{+yyyy.MM.dd}',
            'filter'   => 'message',
            'pattern'  => 'CRITICAL',
            'pipeline' => 'docker-critical'
          },
        ]
      }
    }
  }

[pcfens]

Thanks for this. Don't worry about the failing tests, it looks like I have some work to do on the Rakefile and Gemfile. I'll merge when I get to a real computer later this morning.

[cristianocasella]

thanks,
let me know if I have to put the sample/documentation in the readme or your prefere to do it yourself