Hi,
is there a way to use a custom regex for nginx user-agent plugin? I tried this with a different pipeline and it works, but when i do this in filebeat json file:
{
"user_agent": {
"field": "nginx.access.agent",
"target_field": "nginx.access.user_agent",
"regex_file": "regexes-custom.yaml"
}
it has no effect.
Just to make sure, you are using the Filebeat nginx module, right? Did you edit the module/nginx/access/ingest/default.json from the Filebeat distribution?
Note that you might have to delete the old pipeline. In the Kibana Console you can do something like: DELETE _ingest/pipeline/filebeat-*-nginx*
well it's a modified one, i copied nginx module from the repository and
changed it.
yeah i tried clearing pipelines, and my config is there. Elastic will even
complain if my regex file isn't there but it's still not using the new
patterns from the file