Filebeat dynamically add new field

Elastic Stack Beats
1

Hi expert here,

I need to add a field dynamically based on a conf file locally on the host. It needs to be added for a subset of log entries based on the certain pattern of the log entry content. I read the filebeat tutorial and it does not appear this is supported. Ideally it is some kind of plugin where user can write their own logic.

Anyone can help here if there is any workaround?

2

Logstash does this. Filebeat is not a replacement for Logstash and some features won't be implemented in Filebeat.

3

This topic was automatically closed after 21 days. New replies are no longer allowed.