diff --git a/docs/index.asciidoc b/docs/index.asciidoc index 8162f41f..1e042c1b 100644 --- a/docs/index.asciidoc +++ b/docs/index.asciidoc @@ -93,6 +93,21 @@ output { } ----- +**Example: Configuration for Winlogbeats to Output to Winlogbeat created Data Stream** + +[source,sh] +----- +output { + elasticsearch { + hosts => "hostname" + index => "winlogbeat-8.4.3" + pipeline => "winlogbeat-8.4.3-routing" + action => "create" + } +} +----- + + This example shows the minimal settings for processing data streams. Events with `data_stream.*`` fields are routed to the appropriate data streams. If the fields are missing, routing defaults to `logs-generic-logstash`.