input { beats { port => 5044 } } output { if [fields][container_logs] { opensearch { hosts => ["https://atlantishq.de:9200"] index => "filebeat-containers-dev-%{+YYYY.MM.dd}" ssl_certificate_verification => false user => "logstash" password => "HISTORY_PURGED_SECRET" } }else if [fields][syslog] { opensearch { hosts => ["https://atlantishq.de:9200"] index => "filebeat-syslog-dev-%{+YYYY.MM.dd}" ssl_certificate_verification => false user => "logstash" password => "HISTORY_PURGED_SECRET" } }else{ opensearch { hosts => ["https://atlantishq.de:9200"] index => "filebeat-dev-%{+YYYY.MM.dd}" ssl_certificate_verification => false user => "logstash" password => "HISTORY_PURGED_SECRET" } } }