Filebeat export template doesnt have custom module fields on the generated file

(Daniel Diogo) #1


I developed a custom filebeat module to deal with my logs, that is working correctly, the data are being sent to elastic well splitted.

On the fields.yml file I added the custom fields for the module and when generating they are ignored.

anyone knows what is going on with it?

Thanks in advance

(Adrian Serrano) #2

For a Filebeat module, you add your fields to module/<your module>/_meta/fields.yml.

Then, for those fields to be picked up, you need to run mage update before building the Beat.