If I set pipeline.workers > 1 then event dependent configuration, "%{}", appears to be disabled.
That sounds extremely unlikely, but I don't really have a better suggestion to offer. What happens if you replace your elasticsearch output with stdout { codec => rubydebug }
? Do all resulting events contain the required id
and slug
fields?