I have created a Ingest pipeline for my logs.
Filebeat is sending the logs to Elasticsearch, but they are not going through the Ingest Pipeline, and I am just getting the raw message rather than the structured fields.
When I PUT filebeat-2016.11.17/log/123ID?pipeline=spring-log from a REST client or CURL it works just fine.
My filebeat.yml on output follows the documentation.
### Elasticsearch as output
# Array of hosts to connect to.
Debug mode shows that logs are being successfully sent, and what is being sent, but does not show the URL and whether it is including the pipeline parameter.
I have also tried using parameter.pipeline - but that does not appear to work either.
Using Elastic 5 and Filebeat 5.