Hi From the ListenBeats processor description: Listens for messages sent by libbeat compatible clients (e.g. filebeats, metricbeats, etc) using Libbeat's 'output.logstash', writing its JSON formatted payload to the content of a FlowFile.This processor replaces the now deprecated ListenLumberjack In other words, configure winlogbeats to ship to logstash and point it to the nifi processor and you should be good. Best regards Bob ... View more

Manually setting the source.type field seems to do the job. For your case for example: "fieldTransformations": [ { "input": [], "output": [ "source.type" ], "transformation": "STELLAR", "config": { "source.type": "JOIN(['squid',location,country],'-')" } } ] ... View more

Hi, did you ever manage to fix this? We're having the same issue. , Did you manage to fix it? We're having the same issue. ... View more

Hi, did you ever manage to fix this? We're having the same issue. ... View more