New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Internal fields are prefixed with beats name #18

Closed
mariussturm opened this Issue Nov 10, 2016 · 2 comments

Comments

Projects
None yet
3 participants
@mariussturm
Member

mariussturm commented Nov 10, 2016

Special fields like gl2_source_collector should not be prefixed with the Beats name in order to keep functionality of the fields. This can be done for all gl2_ fields.

Winlogbeat snippet for reproduction:

fields:
  gl2_source_collector: foo
fields_under_root: true

this leads to a field called winlogbeat_gl2_source_collector.

@kroepke kroepke added this to the 2.2.0 milestone Nov 14, 2016

@joschi joschi closed this in d7eff09 Dec 14, 2016

joschi added a commit that referenced this issue Dec 14, 2016

Extract "fields" for every type of beat
Fixes #18

(cherry picked from commit d7eff09)

joschi added a commit that referenced this issue Dec 14, 2016

Extract "fields" for every type of beat
Fixes #18

(cherry picked from commit d7eff09)
@joschi

This comment has been minimized.

Contributor

joschi commented Dec 14, 2016

@mariussturm The latest version of the Beats plugin will properly handle the fields field in the payload of all types of Beats (was only handled for Filebeat before).

This being said, fields_under_root should be set to false (default) for this to work.

@joschi joschi self-assigned this Dec 14, 2016

@mariussturm

This comment has been minimized.

Member

mariussturm commented Dec 14, 2016

Alright, thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment