Filebeat pipeline Apache log pattern including response time


In our apache logs we also log response time with the %D parameter. We would also like to add this field to the filebeat logs so we can analyse it in Kibana.

I can manage to add an updated grok pattern to the filebeat pipeline, however everytime we update our Elastic Cloud version, this seems to be overwritten. I guess because the field is not defined in ECS?
Is there anyway to keep the changes I apply to the pipeline patterns persisted when we upgrade to new versions?

Did you try to copy the ingest pipeline somewhere nearby and just use this one?

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.