Hi,
I have filed "name" in filebeat
-
type: log
enabled: true
paths:
- C:\Desktop\ELK4\aplikacja\macro.log
fields:
log_type: app
name: BYD1
multiline.type: pattern
multiline.pattern: '^\*'
multiline.negate: true
multiline.match: after
field name in Heartbeat config
- type: http
name: BYD1
enabled: true
schedule: "@every 900s"
urls: [" "]
Table created from UpTime data
So now if field "name" from filebeat, field "name" from HeartBeat have same value and Uptime status is "down" I want to add new column with log message (I have this field, but I need to know how to use it in this kind of problem).