Hello, i have my Logstash on one Server and Filebeat on many other mashines with varying IP-Adresses.
I have tried the dns plugin allready, but since the hostname is not convertable to ip it doesn't work. Is there any other way to maybe attach the ip adress to the logs send to logstash from Filebeat? Or maybe simply displaying host as ip from the source?
Thank you
Hey, in case someone comes across the same problem, i have figured out a solution to this problem and just wanted to share. One can simply adjust the filebeat.yml under "General" and have the name be the IP-Address. In my case i simply created an "InsertIP.bat" :
@echo off
(ipconfig | findstr IPv4)>>x.txt
echo %variable%
fart.exe -w x.txt "IPv4-Adresse . . . . . . . . . . :" " "
set /p variable=<x.txt
copy template.yml filebeat.yml
fart.exe -w filebeat.yml CHANGEIPADDRESS "%variable%"
del x.txt
fart is btw. "FindAndReplaceText" .. pretty usefull
In logstash i can now access that IP-Addreess via %{[beat][name]}.
I hope it is helpfull to some. 
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.