Skip to content
Snippets Groups Projects
Verified Commit ae1e994e authored by Vincent Sellier's avatar Vincent Sellier
Browse files

logstash: rename syslog facility to facility_name when it's a string

Such facility ids are generated by NetworkManager but the journalbeat
index mapping is expecting a long (7.15.2)

Related to T3705
parent 8b588209
No related branches found
No related tags found
1 merge request!444logstash: rename syslog facility to facility_name when it's a string
......@@ -30,6 +30,11 @@ filter {
}
}
} else {
if [syslog][facility] !~ /^\d+$/ {
mutate {
rename => { "[syslog][facility]" => "[syslog][facility_name]" }
}
}
if [@metadata][version] {
mutate {
add_field => {
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment