Can we have interface name also stamped on each event?

(Harsha Vardhan) #1


Is there any way to stamp interface name on each event generated by packetbeat ?


(Andrew Kroh) #2

No, Packetbeat does not do this. I assuming you want this information when using the any interface?

If you are not using the any interface, you could add an interface field to the event using the fields configuration setting and set it to name of the interface from which you are collecting.

(Harsha Vardhan) #3

If we have multiple interfaces, this option is not feasible right?.

(system) #4