I use filebeat with Graylog and noticed that in there
source is always set to
admin even if I override it with
fields: source: srcm
I also tried to set it in the top-level prospector configuration as
- #some config source: srcm #other config
How to customize it?
does not work as well.