I have a set of configuration files I'm using to monitor Tomcat. I use these on various servers but when I recently deployed these to a new server I noticed that the "host" field appears as "localhost" when I view the data using Kibana. The host field is populated correctly on other servers using the same configuration.
If I run hostname on the server it returns the correct hostname. Does anybody know how Logstash resolves the hostname and/or why it resolves to localhost rather than the FQDN?