logstash/ci/serverless/pipeline/001_es-output.conf

input {
    heartbeat {
        interval => 1
        add_field => {
            "[data_stream][type]" => "logs"
            "[data_stream][dataset]" => "${INDEX_NAME}.001"
            "[data_stream][namespace]" => "default"
        }
    }
}

output {
    elasticsearch {
        id => "named_index"
        hosts => ["${ES_ENDPOINT}"]
        user => "${ES_USER}"
        password => "${ES_PW}"
        index => "${INDEX_NAME}"
    }

    elasticsearch {
        id => "data_stream"
        hosts => ["${ES_ENDPOINT}"]
        user => "${ES_USER}"
        password => "${ES_PW}"
    }
}