Hi there, I've been messing with Filebeat for about 2 days now..
I can't find a way to interpolate a field in another field. Here's what I have:
processors:
- add_fields:
target: ""
fields.mysubtype: "ABC"
- add_fields:
target: ""
fields.type: "abc-%{mysubtype}"
Expecting my output to be:
{
"type": "abc-ABC"
}
but the output is not interpolated, so the result remains:
{
"type": "abc-%{mysubtype}"
}
I even tried with square brackets, i.e. "%{[mysubtype]}". This is on Filebeats v 7.11.2
Any suggestions, ideas, pointers? Thank you!