I have filed "name" in filebeat
- type: log enabled: true paths: - C:\Desktop\ELK4\aplikacja\macro.log fields: log_type: app name: BYD1 multiline.type: pattern multiline.pattern: '^\*' multiline.negate: true multiline.match: after
field name in Heartbeat config
- type: http name: BYD1 enabled: true schedule: "@every 900s" urls: [" "]
Table created from UpTime data
So now if field "name" from filebeat, field "name" from HeartBeat have same value and Uptime status is "down" I want to add new column with log message (I have this field, but I need to know how to use it in this kind of problem).