Global field in all logs

Elastic Stack Logstash
1

Ho to get particular field global to all documents. Below is my Xml logs
content of cbt (date) should be there in every document

image

I am using filebeat multi pattern
multiline.pattern: "^[[:space:]]"
multiline.negate: true
multiline.match: after
multiline.flush_pattern: '^[[:space:]]'

Logstash
filter {
xml {
store_xml => false
source => "message"
xpath =>
[
"/mv/moid/text()", "name",
"/mv/r/text()", "r-value"
]
}
}

2

If you use Filebeat you can add fields there

3

Hi A_B,

Thanks for quick reply

I need to extract content of cbt in logs and add to every document

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.