Not able to access the filebeat custom fields in logstash output

[Ramalingam_Chandran]

Thanks Philip. So it always needs to be an metadata field?. I was going throught threads and refered this thread for my configuration

Filebeat fields are not working

Here is my filebeat config: filebeat.prospectors: - type: log paths: - C:/inetpub/app01/logs/IIS/*/*.log fields: app_group: iis app_id: app01 - type: log paths: - C:/inetpub/app02/logs/IIS/*/*.log fields: app_group: iis app_id: app02 - type: log paths: - C:/inetpub/app03/logs/IIS/*/*.log fields: app_group: iis app_id: app03 output: logstash: hosts: ["myserver:7777"] And here is logstash: input { beats { port => 7777 } } filter …