How to add additional fields on filebeat

Elastic Stack Beats
1

I want to add additional field on filebeat.yml. I want to name it as instancename and the value is the instance name of my aws ec2 instance. How can I add it to the filebeat config?

2

hi @elkrocks, isn't the aws ec2 instance name already included in the event? Is the goal to rename it?

3

I just add below line. and it works

processors:
  - add_fields:
      fields:
        app.instance: 1
      target: ""
4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.