I have spent quite some time trying to add some tags to Kibana logs yesterday - futilely.
The Kibana logs are in JSON and already contain a "tags" field. The way it looks, Filebeat (maybe beats in general?) chooses not to add tags to an event, if the event has a pre-existing "tags" field - regardless of wether the tags are added via the prospector or "generally".
Is this possible?