I have created a Ingest pipeline for my logs.
Filebeat is sending the logs to Elasticsearch, but they are not going through the Ingest Pipeline, and I am just getting the raw message rather than the structured fields.
When I PUT filebeat-2016.11.17/log/123ID?pipeline=spring-log from a REST client or CURL it works just fine.
My filebeat.yml on output follows the documentation.
output: ### Elasticsearch as output elasticsearch: # Array of hosts to connect to. hosts: ["localhost:9200"] pipeline: "spring-log"
Debug mode shows that logs are being successfully sent, and what is being sent, but does not show the URL and whether it is including the pipeline parameter.
I have also tried using parameter.pipeline - but that does not appear to work either.
Using Elastic 5 and Filebeat 5.