Starting in version 7.16, this experimental functionality has been removed. You should use the journald input in Filebeat instead.
add_id processor generates a unique ID for an event.
processors: - add_id: ~
The following settings are supported:
(Optional) Field where the generated ID will be stored. Default is
(Optional) Type of ID to generate. Currently only
elasticsearchis supported and is the default. The
elasticsearchtype generates IDs using the same algorithm that Elasticsearch uses for auto-generating document IDs.