I have several environments with beats and logstash who write to one Elasticsearch. Each of them have properties like: customer, environmnet type ( production, test) and type (depending on what they are for). In each logstash configuration file (pipeline) i need to set add_field which these three parametrs. Can i do it globall ? Not in every filter ? Maybe is a way to set it globally (set that customer=XYZ etc and only use it later). I know about environment fields (export and use it) but maybe is another way for example set this field in specific file ?
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.