Filebeat Fields

Can I ask, what is the difference between and filebeat.hostname? They have the same value for each host I collect from.


filebeat.hostname contains always the hostname and contains what you configure under shipper->name. By default, takes the hostname as value, so it has the same value as filebeat.hostname. The idea is that you use the "name" to group a set of Filebeat instances and "hostname" to differentiate between them. It's true that for basic installations, the same information is exported twice.