Can we have interface name also stamped on each event?

Elastic Stack Beats
1

Hi,

Is there any way to stamp interface name on each event generated by packetbeat ?

Thanks
Harsha

2

No, Packetbeat does not do this. I assuming you want this information when using the any interface?

If you are not using the any interface, you could add an interface field to the event using the fields configuration setting and set it to name of the interface from which you are collecting.

3

If we have multiple interfaces, this option is not feasible right?.