Logstash hostname as field

[EdBanzil (Edmart Añora Banzil)]

Hi all,
Just wondering how can i get the logstash hostname as field in a clustered environment? all i can see is the hostname of beats. TIA

[_Alex (Alex Stiff)]

You can do this using a ruby script within a filter. See the answer https://discuss.elastic.co/t/how-can-i-get-the-logstash-hostname/51771:

filter {
  ruby {
    init => "require 'socket'"
    code => "event['some-field-name'] = Socket.gethostname"
  }
}

[EdBanzil (Edmart Añora Banzil)]

Hi, It works. I just change it to

ruby {
init => "require 'socket'"
code => "event.set('some field', Socket.gethostname)"
}

Thank you so much!