I'm using filebeat, my setup is pretty plain: I index nginx log files. Now I wan't to log just one more field (
$http_host). Let's say I prefix every line with that:
access_log /var/log/nginx/access.log main
log_format host_main '$http_host $remote_addr - $remote_user [$time_local] "$request" ' '$status $body_bytes_sent "$http_referer" ' '"$http_user_agent" "$http_x_forwarded_for"'; ... access_log /var/log/nginx/access.log host_main;
I'd assume that I can configure nginx module to interprete log lines using a different pattern. I cannot find anything in the filebeat configuration hinting to that.
How do I add the host_name to my log entries?