Can I override existing tags field using filebeat?

Hello! I have a question about filebeat. I have a jsonl logfile and log messages contains 'tags' field. Can I override or add my tags into existing tags field using filebeat? I try add tags in prospector but it isn't work...

By default json fields are written in the json namespace. So if you add tags they should show up on the top level.

Can you share your config file? Which FB version are you using?

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.