From e1d9fc62d3afa7f34feca3a4db88b9ddd68723e2 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Th=C3=A9o=20-=20Le=20Filament?= <theo@le-filament.com>
Date: Mon, 15 May 2023 16:05:51 +0200
Subject: [PATCH] change: add service_type field to dpkg log collection

---
 templates/filebeat.yml.j2 | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/templates/filebeat.yml.j2 b/templates/filebeat.yml.j2
index bb86d37..cea2d1c 100644
--- a/templates/filebeat.yml.j2
+++ b/templates/filebeat.yml.j2
@@ -33,7 +33,8 @@ filebeat.inputs:
   paths:
     - /var/log/dpkg.log
   fields:
-    source_app: "dpkg"
+     service_type: "dpkg"
+  fields_under_root: true
 
 # ================================== Outputs ===================================
 # ------------------------------ Logstash Output -------------------------------
-- 
GitLab