Filebeat diff indeces

input {
  beats {
    tags => "k8s_filebeat"
    port => 5044
  }
}

filter {
  if "k8s_filebeat" in [tags] {
    mutate {
        add_tag => [ "%{[kubernetes][container][name]}" ]
    }
    if [message] =~ "\A\{.+\}\z" {
      json {
        source => "message"
      }
    }
  }
}

output {
    if "k8s_filebeat" in [tags] {
      elasticsearch {
        hosts => ["${ELASTIC_HOST}:9200"]
        index => "%{[kubernetes][container][name]}_%{+YYYY.MM.dd}"
      }
    }
}