kubernetes - Using Filebeats how do you update the fields.yml

Question

I am running filebeats on Kube and have created my own module and mounted it. I can use the module and my pipelines and dashboards are uploaded to filebeats.

The problem I have is that the fields under my module and filesets aren't added to the fields.yml in /usr/share/filebeat/fields.yml, so my index template isn't created with the new fields I have added.

How do I update this file with my fields from my module/_meta/fields.yml and module/fileset/_meta/fields.yml files. Or how do I update the index template with the fields from my module?

If I check the index template it doesn't include any of the fields from my module.

Thank you for any help on this!

question from:https://stackoverflow.com/questions/65831051/using-filebeats-how-do-you-update-the-fields-yml

Answer 1

Waitting for answers