Cyclic reference eror while dissecting source.nat.port

Elastic Stack Beats
1

i all!

I get the following output when starting filebeat with one processor:

....
{"log.level":"error","@timestamp":"2022-11-23T13:29:24.875+0100","log.origin":{"file.name":"instance/beat.go","file.line":1057},"message":"Exiting: error initializing processors: cyclic reference detected for key: 'source.nat.port' accessing 'processors.0.dissect.tokenizer' (source:'filebeat-bug.yml')",
"service.name":"filebeat","ecs.version":"1.6.0"}
Exiting: error initializing processors: cyclic reference detected for key: 'source.nat.port' accessing 'processors.0.dissect.tokenizer' (source:'filebeat-bug.yml')

The processor config is simplified here (I have more fields to be dissected):

# ================================= Processors =================================
processors:
  - dissect:
      tokenizer: "NatIP %{source.nat.ip|ip}:${source.nat.port|integer}"
      overwrite_keys: true

Any ideas?
Seems like a bug.

There have been another cyclic reference issue in the past :

filebeat version: 8.5.1 windows zip

2

Should have been : "%{source.nat.port|integer}" (no $ at srart)

Closing.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.