Re: [syslog-ng] Openstack is a chatty $#!^

Hi Scot! We use a single destination but set the ${__es_index} macro using rewrite rules: elasticsearch2(index("${__es_index:-syslog}-$YEAR.$MONTH.$DAY"));