I add a new field "fields.ip "in filebeat's configure file, it look like below： filebeat: prospectors: input_type: log paths: /home/vagarnt/log/* fields: ip: 192.168.33.11 type: formal encoding: plain And the filebeat send data to logstash. So, the logstash can get the IP information…

How to use the second level of a fields

Topic		Replies	Views
Working with child fields Logstash	4	806	July 6, 2017
Problem deleting fields or renaming (from filebeat) Logstash	7	2130	July 6, 2017
Mutate remove_field not working for JSON field Logstash	7	7063	July 6, 2017
Logstash mutate filter Logstash	9	1819	July 6, 2017
Using field value from one filter logstash to another field Logstash	2	1402	November 19, 2019

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

How to use the second level of a fields

Related topics