Host listed twice, one with hostname one with FQDN

Elastic Stack Beats
1

Hopefully someone can help with this one!
I am just getting started with Elastic Stack (SIEM) and I'm currently using the cloud trial.

I have installed Beats on two hosts.
One host just has WinLogBeat and MetricBeat. This host just displays it's FQDN in Kibana (that's what i want)
The other host has AuditBeat, PacketBeat,WinLogBeat and MetricBeat. This host is showing as 2 hosts in Kibana, one with just the hostname and one with the FQDN.

Obviously i would like the host to only show up as one instance of itself and hopefully just have the FQDN.

Any help would be greatly appreciated.

2

I figured it out. I used the name: parameter in one of the .yml files.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.