We're evaluating topbeat and have a need for a double hostname setup, where both the 'real' hostnames (12349187324.somecloud.com) and nice hostname (elastic08.somecloud.com) can be used to search/filter and graph upon in kibana based on the topbeat indexes.
Since I could not find a way to add custom fields to topbeat I was hoping to use tags (configureable through topbeat.yml). Unfortunately the tags appear in kibana discoverer as fields that are not indexed and therefore not available for visualization and search.
In the kibana settings for that index I don't even see the field.
What options are there to get to the goal we'd like to achieve?
- for instance, can we get the field indexed somehow?
- is there a way to add custom fields?
- some other way?