I want to run filebeats on "n" number of clients, on logstash how can i distinguish each client's filebeat.
Is there any way to include client name in indexing.
Am able to read geo name in each filebeat message. Is there way to add [_source][host][geo][name] in index.
Any other better option for this use case .
Badger
August 12, 2020, 6:57pm
2
The metadata that filebeat adds includes the hostname. You can use a sprintf reference to that in the index name.
or I think you can do this as well to see what @metadata is on output
output {
stdout { codec => rubydebug { metadata => "true" } }
}
system
(system)
Closed
September 9, 2020, 8:32pm
4
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.