Can ElasticAgent/filebeat ingest a log/filestream input metadata as document data?

specifically we have a legacy app that doesn't log a timestamp but logs to new files, is it possible to read file ctime as @timestamp?

Hi,

I don't remind such feature in metricbeat, but maybe you can add a script in the middle to prepend timestamps?

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.