How to create by fields sending data through elasticsearch

[bruno_aleixo (Bruno)]

I know sending by through logstash, creating a grok pattern within the pippeline configuration

follows example created by going through logstash, I would like to reply in the same way sending through elasticsearch, is it possible?

Fields in red

[warkolm (Mark Walkom)]

@bruno_aleixo

follows example created by going through logstash, I would like to reply in the same way sending through elasticsearch, is it possible?

It's not clear what you are asking here sorry, can you try restating it another way please?

[bruno_aleixo (Bruno)]

I want to separate my data that arrives at the kibana into fields, just like the image above, the difference is that in the image I use the filebeat sending to the logstash, in case I want to know if it is possible to separate these fields by sending the filebeat to elasticsearch

[warkolm (Mark Walkom)]

Thanks.

Yes, you can do that with an ingest pipeline in Elasticsearch. Or you might be able to use an existing Filebeat module if it matches your data source.

[bruno_aleixo (Bruno)]

Thanks @warkolm , I will read and return here