Skip to content
This repository has been archived by the owner on Mar 11, 2022. It is now read-only.

Logstash example config processing order #18

Open
ebeahan opened this issue Oct 15, 2020 · 1 comment
Open

Logstash example config processing order #18

ebeahan opened this issue Oct 15, 2020 · 1 comment
Labels
bug Something isn't working

Comments

@ebeahan
Copy link
Member

ebeahan commented Oct 15, 2020

A community user noted that the example Logstash filter configuration won't behave correctly since the mutate plugin will execute mutations in a set order.

One example from example/logstash/2-ecs-conversion.conf:

copy => { '[destport]' => '[destination][port]' }
convert => { '[destination][port]' => 'integer' }
@ebeahan ebeahan added bug Something isn't working and removed bug Something isn't working labels Oct 15, 2020
@webmat webmat added the bug Something isn't working label Oct 15, 2020
@webmat
Copy link
Contributor

webmat commented Oct 15, 2020

Nah I think the "bug" label is appropriate.

Looks like we can fix this simply by outputting subsequent mutate filters. Perhaps one for copy, one for rename, and finally one for convert.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

2 participants