We are using topbeats across a ton of servers to track cpu, mem, etc, and alerting on those fields using elastalert. It would be really nice if I could also add in some of my own custom fields/checks, for example, if a machine is using over 85% cpu, I'd like to add a field to my topbeats output that displays the name and size of the largest file on the system.
I know how to do these checks manually, but is there a way I can tell topbeats to run those checks for me, and place the output into a field??
This would be a magnificent feature if it existed.