Hi , Is it possible to set the beat.name using if condition based on source field value. Eg. if source: /user1/logs, then beat.name=USER1_LOGS else if source:/user2/logs, then beat.name=USER2_LOGS I need this to differentiate for creating vizualizaton graphs If not beat.name , any other fields a…

Set beat.name/any custom field based on source

manojvenkat (Manoj) November 4, 2016, 4:38pm 5

Hi,

I am not able to make this for Filebeat 1.3 . Could you please suggest compatible solution for version 1.3.

Topic		Replies	Views
Customizing source field Beats filebeat	4	3541	September 21, 2016
Custom fields posibility Beats beats-development	4	1150	July 5, 2017
Filebeat overwrites log file source field Beats filebeat	4	1741	July 5, 2017
Beat.name change in Filebeat 5.4 Beats filebeat	2	2058	July 31, 2017
Filebeat log filename when using recursive *.log filter Beats filebeat	3	1448	July 5, 2017

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Set beat.name/any custom field based on source

Related topics