To upgrade to Filebeat 7.x, simply set $filebeat::major_version to 7 and $filebeat::package_ensure to latest (or whichever version of 7.x you want, just not present ...

Add network.forwarded.ip to related.ip for filebeat module fortinet (event.dataset=iis.access): According to ECS field description: All of the IPs seen on your event. Describe a specific use case for ...