I use packetbeat to monitor our memcache instances. I have two linux boxes running multiple instances of memcache. For example I have the following instances defined like this.
Port = 11211 == App1
11212 == App2
11213 == App3
I would like to figure out the best way to add the App1, App2 and App3 name to the event. In my environment I'm running 5.1.2 and my Packetbeat sends directly into ingest nodes.
Can I modify a pipeline on the ingest node to add this App name?