# Filebeat 8.8 input configuration - Add Fields

**URL:** https://discuss.elastic.co/t/filebeat-8-8-input-configuration-add-fields/334949
**Category:** Elasticsearch
**Tags:** docker
**Created:** [June 1, 2023, 10:06am UTC](https://discuss.elastic.co/t/filebeat-8-8-input-configuration-add-fields/334949 "2023-06-01T10:06:01Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![Alessio\_Melis](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/alessio_melis/32/121727_2.png) [@Alessio\_Melis](https://discuss.elastic.co/u/Alessio_Melis)
#### Post date: [June 1, 2023, 10:06am UTC](https://discuss.elastic.co/t/filebeat-8-8-input-configuration-add-fields/334949/1 "2023-06-01T10:06:01Z")

</div>

Hi,

configuration: [filebeat 8.8] --\> [logstash 8.8] --\> [elasticsearch 8.8]  
I'm trying to add fields in my input configuration but when the data is sent to logstash, the index is created without my field.

using the version 7\* I'm able see the new field.

Do you have some hints?

thanks

## My Configuration:

filebeat.yaml  
filebeat.config:  
modules:  
path: ${path.config}/modules.d/\*.yml  
reload.enabled: true  
enabled: true

#setup.ilm.enabled: false  
#setup.template.enabled: false  
#setup.dashboards.enabled: false

filebeat.input:  
- type: filestream  
id: my\_container  
enabled: true  
paths:  
- /var/log/\*.container.log  
#multiline.pattern: \[1\]{3}\s[0-9]{1,2},\s[0-9]{4}  
#multiline.negate: true  
#multiline.match: after  
fields:  
- my\_custom\_field: "xxxxxxx"  
fields\_under\_root: true

output.logstash:  
hosts:  
- logstash

logging.level: info

* * *

my\_pipeline.conf  
input {  
beats {  
port =\> 5044  
}  
}

output {  
elasticsearch {  
hosts =\> ["elasticsearch:9200"]  
index =\> "custom-%{+YYYY.MM}"  
user =\> "elastic"  
password =\> "xxxxx"  
ssl\_certificate\_verification =\> false  
manage\_template =\> false  
}  
}

* * *

1. A-Za-z

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [June 29, 2023, 10:06am UTC](https://discuss.elastic.co/t/filebeat-8-8-input-configuration-add-fields/334949/2 "2023-06-29T10:06:28Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.