Add tags and other fields to the output event

[Udayrakesh]

Are you guys open for adding different fields to the output event like tags or ipaddress incase of EC2 namespace?

[sozay]

+1

[dolgafar]

Yes, this could be used to add the name of the instance? Currently we have to create a:

if [InstanceId] == "i-01bxxxxxx7cabxxxx" { mutate { add_field => { "name" => "testing" } } }

In the filters section, which needs to be updated every time a new instance is added.

The info is already available in describe instance result from aws:

"Tags": [ { "Value": "testing", "Key": "Name" }, { "Value": "Yes", "Key": "Monitoring" } ],