In filebeat, can we add a new field based on existing field?

Elastic Stack Beats
1

Using filebeat 7.4.1 in container env ( Kubertes/docker/ daemon-set )

Can we add a new field based on existing properties ( either direct assignment or concatenate 2 fields etc ). ? Prefer if such a setting is part of the filebeat config itself.

Thanks
John

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.