How to set source: field to local eth0 ip address

Elastic Stack Beats
1

Hi,

Is there a way to specify that filebeat use the local eth0 ip address as the source: field value instead of hostname? Right now I'm doing this by overwriting the field "source:" in each filebeat.input, but I'd like to reuse the same VM image for multiple instances and prebake filebeat in it (which prevents me from hardcoding the ip address using this work around I just mentioned).

Thanks

2

@Kum No, but you could use an environments variables in the configuration, you will need to modify Filebeat startup script to populate this variable with the value of eth0 and filebeat will take the value from the environment.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.