As packetbeat was the first beat, there are still quite a few references in the libbeat library. The most obvious one is that the fallback elasticsearch index is called packetbeat. So for example for topbeat, the index packetbeat has to be used. I suggest the following: Rename the fall back index …

Remove packetbeat references form libbeat

warkolm (Mark Walkom) August 22, 2015, 8:44am 2

Thanks for pointing these out!

If you don't mind, it'd be great if you could raise an issue on GH so we can arrange to have these changes made https://github.com/elastic/libbeat

Topic		Replies	Views
For anyone struggling in changing the index name of your beats, I've got a solution finally Beats packetbeat	2	846	August 9, 2019
How to export beat name instead of hostname for beat.name field Beats	6	1354	July 24, 2016
Different index name for data from filebeat and packetbeat Logstash	2	785	July 6, 2017
Beat.hostname & beat.name values Beats beats-development	7	9075	June 11, 2018
Configure Packetbeat prior to building MacOS pkg Beats packetbeat	6	491	December 22, 2020