Accesing with Logstash to Filebeat parameter fields

Elastic Stack Logstash
1

Hi all,

I'm trying new ELK version (6.2), and I'm using the new config options 'fields' to create a field named logtype. I want to detect logs in Logstash using this parameter.

filebeat.prospectors:
- type: log
  enabled: true
  paths:
    - /var/log/filebeat/filebeat
  fields:
    doc_type: syslog

How can I access to this field in logstash?

2

You can access it like any other field, see https://www.elastic.co/guide/en/logstash/current/event-dependent-configuration.html. If you describe what you want to accomplish it will be possible to provide an example.