Mutate beats field isnt working in logstash5.0.2

Elastic Stack Logstash
1

This pattern in the mutate in logstash.conf isnt working as expected to add hostname as a field. referring to this discussion Mutate beats field it shows working as expected. Any help greatly appreciated.

mutate { add_field => { "hostname" => %{[beat][hostname]} } }

File beats 5.1.1 -> Kafka 0.9 -> Logstash 5.0.2

Thanks

2

Please show an example event, either as reported by a stdout { codec => rubydebug } output or via copy/paste from the JSON tab in Kibana's Discover panel.

3

Thanks Magnus. That worked. adding codec =>json in input .

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.