Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Avoid existing data (if present) in the received json event from being overwritten by added ECS metadata. #164

Open
kxs-who opened this issue Feb 7, 2023 · 0 comments

Comments

@kxs-who
Copy link

kxs-who commented Feb 7, 2023

According to the documentation (https://www.elastic.co/guide/en/logstash/current/plugins-inputs-http.html#plugins-inputs-http-ecs_metadata), the following ECS metadata is populated by the http input plugin:

  • Host IP address
  • Complete HTTP headers
  • HTTP version
  • client user agent
  • host domain and port
  • HTTP method
  • Query path
  • Request content length
  • Request mime type

The following issue was logged because the host field was being overwritten: #61
We would like the http input plugin to have a way to prevent overwriting not just the host metadata but all metadata.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant