Additional fields using FileBeat Configuration


(RK) #1

I have my log message something like this

16:43:47 || INFO : ROTS Machine runup to 220kV @ 200µA

I want to plot the Voltage(kV) and Current (micro Ampere) on Y Axis in 2 different charts in Kibana. So i need the Voltage and Current Data over the period of time (timestamp).

Can we create the two additional fields from filebeat (through some filebeat configuration) and store those fields in ElasticSearch ?

Please let me know how to achieve this.

Thanks and Regards,
RK


(ruflin) #2

Filebeat does not do any log line parsing. For this you must send the events from filebeat through Logstash.


(system) #3