How to automatically change the file name output by Auditbeat.yml

Is it possible to set variable information (date information etc ...) in the file name with the File option of Configure the output? For example, filename_yyyymmdd_hhmmss.log etc ...
Or is there any other way to change the file name dynamically when outputting the collected logs to a file?

yes you can
https://www.elastic.co/guide/en/beats/auditbeat/current/rename-fields.html
and also if you ship your logs first into logstash you can apply your changes and your possible enrichments too

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.