Report host name as FQDN on all platforms

[pickypg]

Apparently Go does not provide the FQDN on all systems (particularly Linux, it seems) because it checks /bin/hostname rather than /bin/hostname -f.

Here's the Go test showing that they accept the shortname: https://golang.org/src/os/os_test.go#L1341

It would be great if we could fill in the actual FQDN rather than an unexpected subset, but it does mean providing an appropriate mechanism for every supported system (or falling back to the subpar behavior that comes out of the box).

As a workaround, #715 will allow environment variables to fill this in, but it still requires something else in the environment to be used.

/cc @andrewkroh

[dMopp]

+1

[Lollaskates]

+1, running topbeat on my linux hosts returns FQDN, but running topbeat on windows hosts (Server 2012R2) only returns the hostname. Would like to have it normalized.

[JakeDEvans]

my linux systems (cent 7.2) report fqdn, but my windows report the shortname.

I would prefer the shortname (which is how my rsyslog data comes in). can we update this request to allow you to specificy the command used to aquire the hostname?

windows: %COMPUTERNAME%.%USERDNSDOMAIN% or %COMPUTERNAME%
linux: hostname -s or hostname -f

[trevorndodds]

Please make this an option, I for one prefer the shortname as it keeps the field length shorter. Some windows domains have really long FQDNs.

[richlv]

it might be preferable to allow running a custom command to determine hostname. on some systems even hostname -f returns short name, and user might run a custom command to determine fqdn.

[dMopp]

A good idea, too but hostname -f shows the short version only if the system is wrongly setup (or didnt have a domain)

[jvkassi]

How can i force this ? We need fqdn

[popstas]

@mib4fun, we replaced host field with fields_under_root, fqdn fills with ansible:

filebeat.prospectors:
- input_type: log
    fields_under_root: true
    fields:
      host: "fqdn"

[popstas]

Also you can define beat.name: just set name on top level of filebeat.yml

[jvkassi]

@popstas ! Its' working !