Filebeat Fields

Hi,
Can I ask, what is the difference between filebeat.name and filebeat.hostname? They have the same value for each host I collect from.

Regards,
David

filebeat.hostname contains always the hostname and filebeat.name contains what you configure under shipper->name. By default, filebeat.name takes the hostname as value, so it has the same value as filebeat.hostname. The idea is that you use the "name" to group a set of Filebeat instances and "hostname" to differentiate between them. It's true that for basic installations, the same information is exported twice.