Hi,
we want to deliver PostgresSQL logs with the filebeat postgres module to an elasticsearch output.
But the filebeat shouldn't manage anything in the elasticsearch. ILM, template and ingest pipelines are managed by other systems.
So the elasticsearch user which is used by filebeat has only write permissions for the index.
The issue is that filebeat tries to put the (already existing) ingest pipeline to Elasticsearch before writing the log document.
Is it possible to disable this?
Regards,
Marcel