I'm using Filebeat and Ingest node to feed my ELK stack with logs. The first line of the log is an header with a different format but information relevant to the rest of the log entries. Is there a way to forward this information to the other parsed entries from the same source?
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.