When I ship logs to graylog 3.0.2 using sidecar 1.01 and filebeat I see the events based on the hostname but when I search using the gl2_source_collector ID I find nothing .
But when I use the hostname I see the logs:
From the web frontened I can see the ID’s match up:
But why is the generated filebeat config is configured to pass the value:
Did I miss anything? Why are the logs not shipped with the gl2_source_collector value being populated?