Winlogbeat 5.3 and logstash 5.2.xx,I I would want in the elastic index fill a field named field.stage with an string like win or so. But i can't find an Statement in winlogbeat yml to do this.
So Index is "logstash-unknown-wineventlog-2017.05.19"
Any help? i would be glad