I am trying to add custom fields and I don't see field added to the event. Winlogbeat logs show following logs
WARN EventLog[CustomLog] Open() error. No events will be read from this source. The specified channel could not be found. Check channel configuration.
Here is what I am using,
winlogbeat.event_logs: - name: Application level: error - name: CustomLog fields: test_field: webserver
Can someone please say what the issue might be