Merge pull request #90008 from prithvipatil97/patch-38

v6.0 Forwarding to Red Hat Managed Elasticsearch is broken

Author: opayne1

observability/logging/logging-6.0/log6x-upgrading-to-6.adoc

@@ -251,13 +251,48 @@ metadata:
   name: instance
   namespace: openshift-logging
 spec:
+  serviceAccount:
+    name: <service_account_name>
+  managementState: Managed
   outputs:
-  - name: default-elasticsearch
+  - name: audit-elasticsearch
+    type: elasticsearch
+    elasticsearch:
+      url: https://elasticsearch:9200
+      version: 6
+      index: audit-write
+    tls:
+      ca:
+        key: ca-bundle.crt
+        secretName: collector
+      certificate:
+        key: tls.crt
+        secretName: collector
+      key:
+        key: tls.key
+        secretName: collector
+  - name: app-elasticsearch
     type: elasticsearch
     elasticsearch:
       url: https://elasticsearch:9200
       version: 6
-      index: <log_type>-write-{+yyyy.MM.dd}
+      index: app-write
+    tls:
+      ca:
+        key: ca-bundle.crt
+        secretName: collector
+      certificate:
+        key: tls.crt
+        secretName: collector
+      key:
+        key: tls.key
+        secretName: collector
+  - name: infra-elasticsearch
+    type: elasticsearch
+    elasticsearch:
+      url: https://elasticsearch:9200
+      version: 6
+      index: infra-write
     tls:
       ca:
         key: ca-bundle.crt
@@ -269,18 +304,23 @@ spec:
         key: tls.key
         secretName: collector
   pipelines:
-  - outputRefs:
-    - default-elasticsearch
-  - inputRefs:
+  - name: app
+    inputRefs:
     - application
+    outputRefs:
+    - app-elasticsearch
+  - name: audit
+    inputRefs:
+    - audit
+    outputRefs:
+    - audit-elasticsearch
+  - name: infra
+    inputRefs:
     - infrastructure
+    outputRefs:
+    - infra-elasticsearch
 ----
 
-[NOTE]
-====
-In this example, application logs are written to the `application-write` alias/index instead of `app-write`.
-====
-
 == Red Hat Managed LokiStack
 
 .v5.9 Forwarding to Red Hat Managed LokiStack