Enrich (or manipulate) filebeat data

I'm new to the ELK stack and I'm trying to have my Nginx stats in Kibana. For that purpose, I use Filebeat and its Nginx module to send data directly to Elasticseach. I then use Kibana to visualise them. However, I'd like to have stats per sub-domain name (sub1.mydomain.com, sub2.mydomain.com, etc) whatever the remaining part of the url.
I googled about that and did not find anything that can help. I know I can send the output of Filebeat to Logstash and do it myself. But I assume other people have the same needs and a robust solution already exists. Thanks for your help.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.