Define custom fields on root level when using multiple config yml files

In my main filebeat.yml I have
enabled: true
path: /usr/share/filebeat/configs/*.yml

So I can define multiple config files.
Each config file specifies a custom field name to add.
However this is always added as a nested field .

- type: log
  enabled: true
    - /var/log/appName.log
    name: appName

This will give the field field.appName. I just want appName.
I tried using target: '' but that doesn't work.
How can I do that?


This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.