elasticsearch - filebeat config changes on old log data

Question

I have a small question regarding filebeat config. I have done the following changes:

from:

processors:
#- add_host_metadata: ~

to:

processors:
- add_host_metadata: ~

But this adds the fields only to the logs which are new and the old logs do not have host metadata fields. Is there any way in which we can achieve that. SO advised to delete registry but then the user was not able to get the logs (Resend old logs from filebeat to logstash) Is this even advisable?

Answer 1

等待大神答复