Winlogbeat 5.3 and logstash 5.2.xx,I I would want in the elastic index fill a field named field.stage with an string like win or so. But i can't find an Statement in winlogbeat yml to do this. Example: #event_id 9,002 tfields.projekt win tfields.stage unknown tkeywords Classic So…

Fields.stage is empty

rolandbp (roland plambeck) May 19, 2017, 8:42am 2

ok; Problem is solved, only a Problem with my Editor and yml-file ; thanks

1 Like

Topic		Replies	Views
No indices - but winlogbeat thinks it's working Beats winlogbeat	9	747	August 16, 2019
Create Field Winlogbeat Beats winlogbeat	5	505	June 25, 2020
Make idices Logstash	2	227	June 22, 2021
Winlogbeat sending data to default index Beats winlogbeat	3	562	February 10, 2022
Adding/configuring available visualization fields Logstash	19	3251	July 6, 2017

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Fields.stage is empty

Related topics