Is it possible to add my own custom field using Winlogbeat?


(Amruth) #1

Hi,

I am trying to add my own custom field using winlogbeat. Can someone please say if that's p[ossible?

Thanks


(Andrew Kroh) #2

See https://www.elastic.co/guide/en/beats/winlogbeat/6.1/configuration-general-options.html#libbeat-configuration-fields.


(Amruth) #3

Thanks Andrew. One more question - would this feature work in all versions of Winlogbeat? Because I am using Winlogbeat 1.x.


(Andrew Kroh) #4

No, it won't work in 1.x. (fields is not present in the 1.x docs).


(Amruth) #5

From which version it supports?


(Andrew Kroh) #6

5.0+


(Amruth) #7

Thanks Andrew :slight_smile:


(system) #8

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.