Hello, I've found and possibly created a bug fix when ElasticSearch ingestion pipelines do not capture data from the regex groups in the grok processor. My setup - ES, Kibana, and Filebeat with version 7.6.2. I have this in elasticsearch/log4j2.properties ### Search Slowlog### appender.index_sear…

Filebeat ingestion pipeline for ElasticSearch slow logs

libbkmz (libbkmz) November 30, 2020, 10:30pm 2

Also, this issue looks similar to that one: Filebeat pipeline for elasticsearch slowlog not indexing/parsing slowlog_took (slowlog.duration)

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.