Hi,
i want to modify the default Nginx Access pipeline in order to add new fields.
In order to test the pipeline before using it to my Production environment i though of creating a new pipeline and test using this one.
So to start i just copied the /usr/share/filebeat/module/nginx/access/ingest/default.json to a new file and hit
curl -H "Content-Type: application/json" -XPUT http://172.28.162.21:9200/_ingest/pipeline/test-nginx-access -d@enhanced.jsonstrong text
This gives me the following parsing error
{"error":{"root_cause":[{"type":"parse_exception","reason":"Failed to parse content to map"}],"type":"parse_exception","reason":"Failed to parse content to map","caused_by":{"type":"json_parse_
exception","reason":"Unexpected character ('{' (code 123)): was expecting double-quote to start field name\n at [Source: org.elasticsearch.transport.netty4.ByteBufStreamInput@689fd676; line: 1,
And the question is how the default.json is not a well formatted JSON that i can use as a starting point?