I have a beat that will have MANY different _types. beats/libbeat/scripts/generate_template.py doesn't seem to support that? Any help greatly appreciated. It looks like you can add more _types with filebeat modles ect, that looks like what I want to do. Thanks!

How to add other _types to the /etc/fields.yml in beats

andrewkroh (Andrew Kroh) December 29, 2016, 11:46pm 2

Packetbeat uses a different type for each protocol. Have a look at its fields.yml.

Topic		Replies	Views
Beats - Define field type with add_fields processor in *beat.yml? Beats	2	849	March 18, 2020
Writing fields.yml Beats	12	8412	July 5, 2017
How to change the field type in the fields.yml on fly Beats filebeat	1	339	October 2, 2019
Configuring fields.yml for custom Beat Beats beats-development	3	3765	August 7, 2017
Beats fields.yml and multi-fields Beats	6	805	June 19, 2018

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

How to add other _types to the /etc/fields.yml in beats

Related topics