Starting in version 7.16, this experimental functionality has been removed. You
should use the journald input in Filebeat instead.
Beat fields
editBeat fields
editContains common beat fields available in all event types.
-
agent.hostname -
Deprecated - use agent.name or agent.id to identify an agent. Hostname of the agent.
type: keyword
-
beat.timezone -
type: alias
alias to: event.timezone
-
fields -
Contains user configurable fields.
type: object
-
beat.name -
type: alias
alias to: host.name
-
beat.hostname -
type: alias
alias to: agent.hostname
-
timeseries.instance -
Time series instance id
type: keyword