Hi All,
How do I custom a configuration for Integration to support a old Filebeat configuration?
Ex.
- id: kube-logs-logstash-multiline
data_stream:
dataset: kubernetes.container_logs
condition:
equals:
kubernetes.namespace: "dev-logstash"
parsers:
- multiline:
type: pattern
pattern: '^\[[0-9]{4}-[0-9]{2}-[0-9]{2}'
negate: false
match: after
processors:
- add_fields:
target: ""
fields:
log_type: "multiline"
- add_tags:
tags: ["LOGSTASH"]
As above, I have applied and found nothing for tags that I added.
Do you guys have any ideas?
BR,