Starting in version 7.16, this experimental functionality has been removed. You
should use the journald input in Filebeat instead.
Beat fields
edit
IMPORTANT: This documentation is no longer updated. Refer to Elastic's version policy and the latest documentation.
Beat fields
editContains common beat fields available in all event types.
-
agent.hostname -
Deprecated - use agent.name or agent.id to identify an agent. Hostname of the agent.
type: keyword
-
beat.timezone -
type: alias
alias to: event.timezone
-
fields -
Contains user configurable fields.
type: object
-
beat.name -
type: alias
alias to: host.name
-
beat.hostname -
type: alias
alias to: agent.hostname
-
timeseries.instance -
Time series instance id
type: keyword