How to rename filebeat fields

how to rename filebeat fields?

I need 'rename' source to 'path'.
and need to rename 'beat.hostname' to 'host'.

Beacause I use ‘path’ and 'host' in es.

thank you @@@

In the upcoming v6.3.0 release there will be a rename processor in Beats. See https://www.elastic.co/guide/en/beats/filebeat/master/rename-fields.html.

But until that is released you need to use either Logstash or Ingest Node to rename fields.

Excuse me, and when to release v6.3.0 for filebeat?

I need this feature on filebeat also. some JSON log has several examples of repeated field names. especially with a dot-notation.

JP

v6.3.0 is available now.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.