Global field in all logs

Ho to get particular field global to all documents. Below is my Xml logs
content of cbt (date) should be there in every document


I am using filebeat multi pattern
multiline.pattern: "^[[:space:]]"
multiline.negate: true
multiline.match: after
multiline.flush_pattern: '^[[:space:]]'

filter {
xml {
store_xml => false
source => "message"
xpath =>
"/mv/moid/text()", "name",
"/mv/r/text()", "r-value"

If you use Filebeat you can add fields there

Hi A_B,

Thanks for quick reply

I need to extract content of cbt in logs and add to every document

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.