Good afternoon, everyone!! I’m defining a new index for my logs that are coming from wazuh through fluent-bit, I believe I have configured everything correctly, however, I still don’t get paid for my newly created INDEX, it continues going to the Default Stream. can anyone help me?
these were the settings made by me in the new stream
I set a field to pull the new log_type into the stream
this is my indice created
I added the log_type rule
