Rename default output field names

Is the default Filebeat output name for log lines "message"? Can I give it a different name by configuring filebeat.yml, instead of using the rename processor in ingest node?

Also, can I change the default "source" field (file path, not "_source") name?


No, you need to use ingest node or Logstash to rename fields.


1 Like

Thank you, Andrew.

This topic was automatically closed after 21 days. New replies are no longer allowed.