IP Adress and field "source" filled with "unknwn"

How can i get the source client IP in a Log Message field?
The field source in everywhere “unknown”, only field “filebeat_host_name” has the hostname.

I use the newest versions of sidecar (1.0.1), filebeat and graylog (3.0.2).

Thank you!

Search a bit more. I faced the same today. It’s only 5 minutes.

Ok but what about the ip Address?

graylog stores the client IP address (from the incoming package) in gl2_remote_ip field.
If you want in another field, you can modify it with pipelines, or modify the beats config to store in another field

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.