Filebeat Not Capturing "hostname" as full FQDN on Windows

Elastic Stack Beats
1

Hello,

I am having an issue with Filebeat v 1.2.3 (but probably others as well as an older one had the same issue) where the host value returns only the hostname and not the full FQDN on Windows clients (E.g. server01 instead of server01.company.com).

When I run Filebeat on Linux systems it displays the full FQDN as expected. I could live with this if all agents returned the partial hostname but will need to fix this as it is inconsistent and makes searching difficult.

Let me know if anyone has a workaround/solution for this.

2

It's a known issue. https://github.com/elastic/beats/issues/1070

Beats use the Go stdlib for obtaining the hostname and it has slightly different behavior across platforms.

3

Thank you. I don't know how I missed that one. I will apply the workaround.

4

This topic was automatically closed after 21 days. New replies are no longer allowed.