From e1d9fc62d3afa7f34feca3a4db88b9ddd68723e2 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Th=C3=A9o=20-=20Le=20Filament?= <theo@le-filament.com> Date: Mon, 15 May 2023 16:05:51 +0200 Subject: [PATCH] change: add service_type field to dpkg log collection --- templates/filebeat.yml.j2 | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/templates/filebeat.yml.j2 b/templates/filebeat.yml.j2 index bb86d37..cea2d1c 100644 --- a/templates/filebeat.yml.j2 +++ b/templates/filebeat.yml.j2 @@ -33,7 +33,8 @@ filebeat.inputs: paths: - /var/log/dpkg.log fields: - source_app: "dpkg" + service_type: "dpkg" + fields_under_root: true # ================================== Outputs =================================== # ------------------------------ Logstash Output ------------------------------- -- GitLab