I want to parse/filter the fields in Logstash, which are crated by metricbeat.
I want to store system.cpu.total.pct -> under custom field percentCpu
Reason for this change is:
I have 90% unix servers, where custom scripts are calculating 'percentCpu' and sending through filebeat.
On Windows machine we dont have such scripts so metricbeat need to be used.
Since visualization is using 'percentCpu' field for aggregation I have to do above change.